This subchapter does not apply to:
(1) a person who is required to maintain and disseminate a privacy policy under:
(A) the Gramm-Leach-Bliley Act (15 U.S.C. Sections 6801 to 6809);
(B) the Family Educational Rights and Privacy Act of 1974 (20 U.S.C. Section 1232g); or
(C) the Health Insurance Portability and Accountability Act of 1996 (42 U.S.C. Section 1320d et seq.);
(2) a covered entity under rules adopted by the commissioner of insurance relating to insurance consumer health information privacy or insurance consumer financial information privacy;
(3) a governmental body, as defined by Section 552.003, Government Code, other than a municipally owned utility;
(4) a person with respect to a loan transaction, if the person is not engaged in the business of making loans; or
(5) a person subject to Section 901.457, Occupations Code.