(a) The following information maintained by state executive branch agencies with respect to individuals and their dependents is personal information exempted from disclosure as an unreasonable invasion of privacy under the provisions of §29B-1-1 et seq. of this code, and may not be released to non-governmental entities:
(1) An individual’s Social Security number; or
(2) An individual’s credit or debit card number.
(b) Notwithstanding the provisions of subsection (a) of this section, the information enumerated in said subsection may be released for such purposes as are authorized by federal law or regulation, a provision of this code, or a legislative rule promulgated pursuant to the provisions of §29A-1-1 et seq.