These third parties are only permitted access only to information that reasonably necessary for them to provide such limited services, are prohibited from using such information for any purpose other than those limited services, and are required to maintain the confidentiality of any such information which may be personal information