PRIVACY PROTECTIONS.

(a) The privacy protections provided an individual under 21 C.F.R. Section 1314.45 apply to information entered or stored in a real-time electronic logging system.

(b) A business establishment that engages in over-the-counter sales of a product containing ephedrine, pseudoephedrine, or norpseudoephedrine may disclose information entered or stored in a real-time electronic logging system only to the United States Drug Enforcement Administration and other federal, state, and local law enforcement agencies.

(c) A business establishment that engages in over-the-counter sales of a product containing ephedrine, pseudoephedrine, or norpseudoephedrine may not use information entered or stored in a real-time electronic logging system for any purpose other than for a disclosure authorized by Subsection (b) or to comply with the requirements of this chapter.

(d) Notwithstanding Subsection (c), a business establishment that engages in over-the-counter sales of a product containing ephedrine, pseudoephedrine, or norpseudoephedrine or an employee or agent of the business establishment is not civilly liable for the release of information entered or stored in a real-time electronic logging system unless the release constitutes negligence, recklessness, or wilful misconduct.