Even though it was not illegal for the bank to share its customers' personal and financial information with an outside marketing company in return for a commission on sales, the state's attorney general accused the bank of engaging in deceptive business practices by failing to honor its promise to its customers to keep records private.