(a) Information in the custody of a governmental body that relates to fraud detection and deterrence measures is confidential and excepted from the requirements of Section 552.021. For purposes of this section, fraud detection information includes risk assessments, reports, data, protocols, technology specifications, manuals, instructions, investigative materials, crossmatches, mental impressions, and communications that may reveal the methods or means by which a governmental body prevents, investigates, or evaluates fraud.
(b) The confidentiality protection provided by Subsection (a) does not affect the ability of a governmental body to share information described by Subsection (a) as authorized by other law for law enforcement and fraud detection and prevention purposes.