; and (6) in subsection (d), as so redesignated— (A) in paragraph (1)— (i) by inserting collecting or before disclosing nonpublic ; and (ii) by striking subparagraph (B) and inserting the following: (B) the purpose for which the financial institution collects the nonpublic personal information of individuals with whom the financial institution has a customer or consumer relationship, as well as how the data will be used; ; (B) in paragraph (2), by inserting before the semicolon the following: , provided in a manner that provides individuals with whom the financial institution has a customer or consumer relationship a meaningful understanding of the information that is collected ; (C) in paragraph (3), by striking and at the end; (D) in paragraph (4), by striking the period at the end and inserting a semicolon; and (E) by adding at the end the following: (5) if the financial institution collects nonpublic personal information for any purpose other than to provide a specific product or service such an individual is seeking— (A) a description of such information; (B) the purpose for which such information is collected; and (C) the right of such individual to opt out of having such nonpublic personal information collected or disclosed to a nonaffiliated third party, and the manner in which such individual may make such opt out election; (6) the data retention policies of the financial institution, including the period of time for which the institution retains the nonpublic personal information relating to such individual; (7) the right of such individual to direct the financial institution to terminate the sharing of nonpublic personal information with a nonaffiliated third party, and the manner in which such individual may make such direction; (8) the right of such individual to request that the financial institution provide the individual with a list of all nonpublic personal information relating to the individual held by the financial institution, and the manner in which the individual may make such request