The new policy eliminates the “positive list” contained in the previous disclosure policies—instead, all information created by or provided to the Bank will be disclosed unless it appears on a list of “exceptions” specified in the policy.