A car dealership gives another company a consumers financial records without notifying the consumer. Which regulatory act did the car dealership violate?

The car dealership violated The Gramm-Leach-Bliley Act. This act protects consumer financial privacy. when the customer gives you their personal information and you intend on sharing their information with another party you must give the consumer A privacy notice / opt out notice.