; or (iii) the nonpublic personal information may be necessary to retain for a purpose described in an exception under section 502(e). (B) Limitation on retained nonpublic personal information With respect to nonpublic personal information that a financial institution would be required to delete under this subsection but for the application of this paragraph, the financial institution may only use such nonpublic personal information for the applicable purpose described under subparagraph (A). (c) Timing A financial institution that receives an authorized request, under this section, from an individual with whom such financial institution has a customer or consumer relationship, shall respond within 45 business days. (d) Rulemaking Not later than the end of the 1-year period beginning on the date of enactment of this section, each agency or authority described in section 504 shall issue rules to carry out this section with respect to the financial institutions subject to its jurisdiction. . (b) Clerical amendment The table of contents in section 1(b) of the Gramm-Leach-Bliley Act is amended by inserting after the item relating to section 502 the following: Sec. 502A. Obligations with respect to access and deletion of nonpublic personal information. . 9. Obligations with respect to the international sharing of nonpublic personal information (a) In general Title V of the Gramm-Leach-Bliley Act ( 15 U.S.C. 6801 et seq. ), as amended by section 10, is further amended by inserting after section 502A the following: 502B. Obligations with respect to the international sharing of nonpublic personal information (a) In general A financial institution may not share with a foreign government nonpublic personal information relating to an individual with whom such financial institution has a customer or consumer relationship. (b) Law enforcement exception Subsection (a) shall not apply to the sharing of the nonpublic personal information relating to such an individual with a foreign government authority if such sharing is— (1)