; and (2) the financial institution does not use or disclose the code or other means of record identification for any other purpose, and does not disclose the mechanism for reidentification. (d) Permissible use (1) Limited use of data Deidentified information sent or received by a financial institution shall only be used— (A) to identify suspicious activity that may merit the filing of a suspicious activity report under section 5318(g) of title 31, United States Code; (B) for the purpose stated in section 5311 of title 31, United States Code; or (C) for a cybersecurity purpose. (2) No further communication A financial institution may not transmit or share any deidentified information except with— (A) a financial institution in accordance with this section; (B) the Secretary of the Treasury; (C) an agency or authority referenced in section 505(a) in accordance with applicable law