Point out the incorrect statement.

Question $34$ options:

NPI is personally identifiable financial information that a consumer gives to a financial institution

Privacy Rule requires that consumers have a chance to opt out of certain types of data sharing with nonaffiliated third parties

GLBA does not require financial institutions to follow privacy and security rules

Sarbanes$-$Oxley $($SOX$)$ Act protects investors from financial fraud