CONFIDENTIALITY OF RECORDS; OTHER RECORDS EXEMPT FROM DISCLOSURE.

(a) Records relating to individual depository accounts or depository account holders, including current, former, or prospective depository account holders, that are in the custody of the depository or a vendor performing services related to the depository are confidential and exempt from disclosure under Chapter 552.

(b) The following information of the depository is excepted from the requirements of Section 552.021:

(1) records and other information related to the security of the depository;

(2) records related to the method of setting the depository's fees, service charges, penalties, and other charges or payments; and

(3) commercial or financial information that would cause substantial competitive harm to the depository, including operational or other information that would give advantage to competitors or bidders.

(c) Notwithstanding Subsection (a), depository account information may be disclosed:

(1) to a depository account holder regarding the depository account holder's account;

(2) to a state or federal agency as required by applicable law;

(3) to a vendor providing services to the depository;

(4) in response to a subpoena issued under applicable law;

(5) if compiled as collective information that does not include any identifying information about a person; or

(6) as otherwise permitted by the depository account agreement applicable to a depository account holder's account.