(a) A security guard agency may not divulge information obtained while providing services unless:
(1) directed by the client for whom the services are provided;
(2) authorized by subsection (b) of this section; or
(3) required by law.
(b) If, while providing services, a security guard agency obtains any information about a criminal offense, the agency may divulge the information to:
(1) a law enforcement officer;
(2) the Attorney General or a representative of the Attorney General; or
(3) a State’s Attorney or a representative of a State’s Attorney.
(c) Except as provided in subsection (d) of this section, an individual who is employed by a security guard agency may not divulge to anyone other than to authorized staff of the agency any information that:
(1) was acquired by the employee or other agency staff while providing services for the agency; and
(2) relates to the assignment in which services are provided.
(d) An employee of a security guard agency may divulge information that is restricted under subsection (c) of this section:
(1) as directed by the security guard agency; or
(2) on a request made by the Secretary in the course of an investigation by the Secretary.