All of the following statements about confidentiality in a company's AML program are correct EXCEPT:

a$.$ An insurance company is prohibited from disclosing the fact that it has filed a Suspicious Activity Report $($or from disclosing information in that report$)$ to a credit reporting agency.

b$.$ An insurance company is prohibited from disclosing the fact that it has filed a Suspicious Activity Report $($or from disclosing information in that report$)$ to the customer.

c$.$ Insurance companies may discuss with their agents and brokers information pertaining to suspicious transactions with which they are involved. $q,$ d$.$ Insurance companies must maintain a list, accessible by all company employees and producers, of customers for whom SARs have been filed.