Under the California Financial Information Privacy Act, commonly called SB1 after its billnumber, they would have to either stop sharing among affiliates that are not in the same line of business (for example, a bank affiliate couldn't share with an insurance affiliate), or submit to the law's opt-out requirement.