(1) A commercial entity may not disclose nonpublic personal information that the commercial entity obtained on or after January 1, 2004, as a result of a consumer transaction if the commercial entity fails to comply with Section 13-37-201.
(2) This chapter may not be interpreted as authorizing a commercial entity to disclose nonpublic personal information to a greater extent than the commercial entity is otherwise permitted to disclose nonpublic personal information.