(a) A customer may authorize disclosure of financial records pertaining to the customer by signing and dating a statement authorizing the disclosure; or, if acceptable to the financial institution, a customer may provide authorization orally. The authorization may specify:
(1) The name of the person to which disclosure is authorized;
(2) The financial records that are authorized to be disclosed; and
(3) The period of time during which the authorization is effective.
(b) No authorization shall be required by a financial institution as a condition of doing business with the financial institution.