No, I understand that point.
If Tom Wappel inquires from his bank, the bank must notify you, and you have certain grounds upon which you can object to that information, and that's the end of it. And you're happy with that.
Your concern is with the bank, on its own, contacting me without previously contacting you and saying that the police are investigating. You want to be able to have those same objection abilities when the provider decides to give the information. Or you might ask that the provider in all cases not be allowed to give the information unless the client asks. Are you asking that?