“…Phase 1 reviews assess the quality of a jurisdiction's legal and regulatory framework for the exchange of information, while Phase 2 reviews look at the practical implementation of that framework. …”