…ages are strictly limited to those for the following purposes: transactions and events that suggest a risk of fraud or identity theft; possible breaches of the security of customers' personal information; steps consumers can take to prevent or remedy harm caused by data security …