Notwithstanding § 9020C of this title, a state agency may disclose personal information if the disclosure is:
(1) Necessary to perform the specific statutory duties of the state agency that collected or is collecting the personal information, or required by state or federal law or regulation;
(2) Made pursuant to a court order or by law; or
(3) If the information is used solely for statistical purposes and is in a form that cannot be used to identify any particular person.