A governmental agency shall develop and establish commercially reasonable procedures to ensure that entity identifying information or personal identifying information that is collected or obtained by the governmental agency is secure and cannot be accessed, viewed or acquired unless authorized by law. Nothing in this article shall be construed to restrict, diminish or otherwise affect the provisions of title 39.