(a) Each fusion center operating in this state shall adopt a privacy policy providing at a minimum that, with respect to an individual or organization, the fusion center:
(1) will not seek, collect, or retain information that is based solely on any of the following factors, as applicable to that individual or organization:
(A) religious, political, or social views or activities;
(B) participation in a particular organization or event; or
(C) race, ethnicity, citizenship, place of origin, age, disability, gender, or sexual orientation; and
(2) will take steps to ensure that any agency that submits information to the fusion center does not submit information based solely on a factor described by Subdivision (1).
(b) In a criminal investigation, a factor described by Subsection (a)(1) may not alone give rise to reasonable suspicion. However, a factor described by Subsection (a)(1) may be used in connection with a specific description of a suspect in the investigation.