(a) Records.--The board shall maintain files and records deemed necessary for the administration and enforcement of this part.

(b) Confidentiality of information.--

(1) The following information submitted by an applicant, licensee or permittee under Chapter 35 (relating to application and licensure) or obtained by the board or the bureau as part of a background or other investigation from any source shall be confidential and withheld from public disclosure:

(i) Information relating to character, honesty and integrity, including family, habits, reputation, history of criminal activity, business activities, financial affairs and business, professional and personal associations submitted to or otherwise obtained by the board or the bureau.

(ii) Nonpublic personal information, including home addresses, telephone numbers and other personal contact information, Social Security numbers, educational records, memberships, medical records, tax returns and declarations, actual or proposed compensation, financial account records, creditworthiness or financial condition relating to an applicant, licensee or permittee or the immediate family thereof.

(iii) Information relating to proprietary information, trade secrets, patents or exclusive licenses, architectural and engineering plans and information relating to competitive marketing materials and strategies, including customer-identifying information or customer prospects for services subject to competition.

(iv) Security information, including risk prevention plans, detection and countermeasures, emergency management plans, security and surveillance plans, equipment and usage protocols and theft and fraud prevention plans and countermeasures.

(v) Information with respect to which there is a reasonable possibility that public release or inspection of the information would constitute an unwarranted invasion into personal privacy of an individual as determined by the board.

(vi) Records of an applicant, licensee or permittee not required to be filed with the Securities and Exchange Commission by issuers that either have securities registered under section 12 of the Securities Exchange Act of 1934 (48 Stat. 881, 15 U.S.C. § 78l) or are required to file reports under section 15(d) of the Securities Exchange Act of 1934 (48 Stat. 881, 15 U.S.C. § 78o).

(vii) Records considered nonpublic matters or information by the Securities and Exchange Commission as provided by 17 CFR 200.80 (relating to commission records and information).

(viii) Financial information provided to the board by an applicant, licensee or permittee.

(2) No claim of confidentiality may be made regarding criminal history record information that is available to the public under 18 Pa.C.S. § 9121(b) (relating to general regulations).

(3) Except as provided in paragraph (1), no claim of confidentiality may be made regarding a record in possession of the board that is otherwise publicly available from the board under the act of February 14, 2008 (P.L.6, No.3), known as the Right-to-Know Law.

(4) Except as provided in section 3904(h) (relating to investigations and enforcement), the information made confidential under this section shall be withheld from public disclosure in whole or in part, except that confidential information shall be released upon the order of a court of competent jurisdiction or, with the approval of the Attorney General, to a duly authorized law enforcement agency or shall be released to the public, in whole or in part, to the extent that the release is requested by an applicant, licensee or permittee and does not otherwise contain confidential information about another person.

(5) The board may seek a voluntary waiver of confidentiality from an applicant, licensee or permittee but may not require an applicant, licensee or permittee to waive the confidentiality provided under this subsection as a condition for the approval of an application, renewal of a license or other action of the board.

(6) (i) No current or former member and no current or former employee, agent or independent contractor of the board, the department, the Pennsylvania State Police, the Office of Attorney General or other executive branch office who has obtained confidential information in the performance of duties under this part shall intentionally disclose the information to a person, knowing that the information being disclosed is confidential under this subsection, unless the person is authorized by law to receive it.

(ii) A violation of this subsection shall constitute a misdemeanor of the third degree.

(iii) In addition to any penalty under subparagraph (ii), an employee, agent or independent contractor who violates this subsection shall be administratively disciplined by discharge, suspension, termination of contract or other formal disciplinary action as appropriate. If a current member violates this paragraph, the other members shall refer the matter to the current member's appointing authority.

(c) Notice.--Notice of the contents of information, except to a duly authorized law enforcement agency pursuant to this section, shall be given to an applicant, licensee or permittee in a manner prescribed by the rules and regulations adopted by the board.

(d) Information held by other agencies.--Files, records, reports and other information in the possession of the department pertaining to an applicant, licensee or permittee shall be made available to the board as may be necessary to the effective administration of this part.