; and (B) that the creditor may not discriminate on the basis of that information. (e) Prohibition on sharing information with third parties (1) In general Other than disclosures to the Bureau required by subsection (f), creditors may not share, exchange, transfer, sell, lease, rent, provide, disclose, or otherwise permit access to any third party the information provided by applicants pursuant to a request for information under subsection (c)(1)(A)(i). (2) Third party The term third party means any person, partnership, or corporation that is not— (A) the person, partnership, or corporation that is sharing the information; and (B) solely performing an outsourced function of the creditor if the person, partnership, or corporation is contractually or legally prohibited from using, storing, or sharing the personal information after the conclusion of the outsourced function. (f) Disclosure of information to Bureau (1) In general Not later than March 1 of the year after a covered year for a creditor, the creditor shall submit to the Bureau all of the information that the creditor collected under clause (i) of subsection (c)(1)(A) and itemized under clause (iii) of that subsection during that covered year. (2) Information retained Each creditor that submits information to the Bureau under paragraph (1) shall retain a copy of that information in the records of the creditor for not less than 3 years after the date on which the creditor submits the information. (3) Prohibition A creditor that collects information under subsection (c)(1)(A) may not— (A) share, exchange, transfer, sell, disclose, or otherwise permit access to that information except as provided in this subsection