(a) Confidential information that is provided to a financial institution, affiliate, or service provider of a financial institution, whether in the form of a report of examination or otherwise, is the confidential property of the department. The information may not be made public or disclosed by the recipient or by an officer, director, manager, employee, or agent of the recipient to a person not officially connected to the recipient as officer, director, employee, attorney, auditor, or independent auditor except as authorized by rules adopted under this subtitle.
(b) A person commits an offense if the person discloses or uses information in violation of this section. An offense under this section is punishable as if it were an offense under Section 37.10, Penal Code.