§ 899-AA Notification; Person Without Valid Authorization Has Acquired Private Information