There is significantly less protection than there is even for tax returns, which themselves clearly receive inadequate protection. In particular, blanket permi

There is significantly less protection than there is even for tax returns, which themselves clearly receive inadequate protection. In particular, blanket permission is given for warrentless access for "law enforcement activity" and undisclosed, target unauthorized access for "compliance with customer due diligence". And overall the restrictions are no stronger than "shall not"-- it's not a felony to violate the rules. In practice it's likely to end up like many states license plate databases where it's easy for sleazy PIs to just bribe access through corrupt LEO or agency desk staff.