From the Key Bank privacy policy:
KeyCorp (“Key”) does not share customer information about you outside of the Key family of companies, except as permitted by law.
(Emphasis mine.) Well that’s reassuring. At least I know they’ll act in my best interests.