I think the owner of the information (which appears to be the investment company), if subject to GLBA privacy rules, would provide the notice. In the notice they would define their affiliate sharing policy and provide the customers a chance to opt out of affiliate sharing. That is, if you are an affiliate. If you are not an affiliate, they would disclose their practice to share their information with third parties.
_________________________
Life without Jesus is like an unsharpened pencil - it has no point.