(A) Each portal operator shall do all of the following:
(1) Provide the division of securities with read-only access to the administrative sections of its OhioInvests portal;
(2) Upon the written request of the division, furnish to the division any of the records required to be maintained and preserved under section 1707.057 of the Revised Code.
(3) Take reasonable efforts to verify that no purchaser exceeds the purchase limitations set forth in division (F) of section 1707.051 of the Revised Code.
(B)(1) A portal operator shall not disclose, except to the division of securities, personal information without the written or electronic consent of the prospective purchaser or purchaser. For purposes of division (B) of this section, "personal information" means information provided to a portal operator by a prospective purchaser or purchaser that identifies, or can be used to identify, the prospective purchaser or purchaser.
(2) Division (B)(1) of this section does not apply with respect to records required to be furnished to the division under division (A)(2) of this section, the disclosure of personal information to an OhioInvests issuer relating to its OhioInvests offering, or the disclosure of personal information to the extent required or authorized under other law.