(a) The following information maintained by state executive branch agencies with respect to individuals and their dependents, is personal information, exempted from disclosure under the provisions of article one, chapter twenty nine-b of this code, and may not be released to nongovernmental entities:
(1) An individual's social security number; or
(2) An individual's credit or debit card number.
(b) Notwithstanding the provisions of subsection (a) of this section, the information enumerated in said subsection may be released for such purposes as are authorized by federal law or regulation, a provision of this code or a legislative rule promulgated pursuant to the provisions of chapter twenty-nine-a of this code.