22A.2  Personal information protected.
  1.  A public agency shall not do any of the following:
  a.  Require an entity which is exempt from taxation under section 501(c) of the federal Internal Revenue Code to provide the public agency with personal information.
  b.  Release, publicize, or otherwise disclose personal information in the possession of the public agency without the express, written permission of every member, supporter, volunteer, and donor of the tax-exempt entity identified in the information and the tax-exempt entity.
  c.  Request or require a current or prospective contractor with the public agency to provide the public agency with a list of entities exempt from taxation under section 501(c) of the federal Internal Revenue Code to which the contractor has provided financial or nonfinancial support.
  2.  This section does not prohibit any of the following:
  a.  Disclosure of personal information pursuant to a lawful warrant issued by a court of competent jurisdiction.
  b.  Disclosure of personal information pursuant to a lawful request for discovery if all of the following requirements are met:
  (1)  The requestor demonstrates a compelling need for the personal information by clear and convincing evidence.
  (2)  The requestor obtains a protective order barring disclosure of personal information to any person not directly involved in the litigation.
  c.  Disclosure of personal information pursuant to an agreement between a public agency and an entity which is exempt from taxation under section 501(c) of the federal Internal Revenue Code.
  d.  Disclosure of personal information included in judicial proceedings that are public pursuant to section 602.1601. However, upon petition of an entity which is exempt from taxation under section 501(c) of the federal Internal Revenue Code, the court shall seal a case file that is otherwise public pursuant to section 602.1601 to protect the personal information contained in that file.
2021 Acts, ch 120, §3