has a customer or consumer relationship. (b) Law enforcement exception Subsection (a) shall not apply to the sharing of the nonpublic personal information relating to such an individual with a foreign government authority if such sharing is— (1) done for legitimate law enforcement purposes