(1) In order to perform the functions and duties of the GGCC as set forth in this part 6, the chief information officer shall exercise the following powers:
(a) To prescribe procedures governing the operation of the GGCC automated data processing equipment and software and the physical plant;
(b) In accordance with the policies, standards, specifications, and guidelines formulated and promulgated pursuant to section 24-37.5-106 (1)(c), adopt such rules as may be necessary to carry out the purposes and provisions of this part 6;
(c) To contract for such services and equipment as the GGCC may require;
(d) To negotiate service level agreements with customers;
(e) To produce such reports as may be necessary; and
(f) To control the information technology revolving fund pursuant to section 24-37.5-112.
(2) (a) Except in accordance with judicial order or as otherwise provided by law, no employee of the office shall divulge or make known in any way information disclosed in any restricted or protected document, program, or dataset located at or in the custody of the office.
(b) Any person who violates the provisions of paragraph (a) of this subsection (2) commits a class 1 misdemeanor and shall be punished as provided in section 18-1.3-501, C.R.S. In addition, such person shall be subject to removal or dismissal from state employment on grounds of malfeasance in office.