; (B) the list of categories of nonaffiliated third parties with whom the financial institution shares nonpublic personal information relating to such individual; and (C) the list of categories of nonaffiliated third parties from whom the financial institution has received nonpublic personal information relating to such individual. (2) Format Disclosures described under paragraph (1) shall be in a structured, commonly used, and machine-readable format. (3) Exception For purposes of subparagraphs (B) and (C) of paragraph (1), a financial institution is not required to disclose a nonaffiliated third party with whom the financial institution shares or receives nonpublic personal information relating to such individual pursuant to an exception described under any of paragraphs (3) through (8) of section 502(e). (b) Deletion of information (1) In general Upon an authorized request from an individual with whom a financial institution has a customer or consumer relationship, a financial institution shall delete any nonpublic personal information relating to such individual held by the financial institution. (2) Certain inactive accounts If such individual has not used a product or service provided by a financial institution for 1 year, the financial institution shall— (A) notify such individual that such individual has the right to request the deletion of any nonpublic personal information relating to such individual held by the financial institution, and provide such individual with clear instructions on how to make such request; and (B) for each additional 1-year period with respect to which such person continues to not use a product or service of the financial institution, resend the notice described under subparagraph (A). (3) Exception (A) In general This subsection shall not require a financial institution to delete nonpublic personal information if— (i) the financial institution is otherwise required by law to retain the nonpublic personal information