(a) The Commissioner of Revenue Services and financial institutions, as defined in Section 469A(d)(1) of the Social Security Act, as amended from time to time, doing business in this state, shall develop and operate a data match system using automated data exchanges to the maximum extent feasible and enter into agreements regarding the administration of such system. The commissioner may waive, for any financial institution, the requirement to enter into such agreement. Notwithstanding the provisions of § 12-15, the commissioner or the commissioner’s designee shall provide to each financial institution a list of taxpayers who owe taxes to the state, which taxes are finally due and payable and with respect to which every administrative or judicial remedy, or both, has been exhausted or has lapsed. Such list shall include each taxpayer’s address, Social Security number or other taxpayer identification number and such other information as may be necessary or convenient for the administration of the data match system. Not later than ninety days after receipt of such list from the commissioner, each financial institution shall provide the commissioner with account information for those taxpayers who appear on the commissioner’s list and who maintain an account with such financial institution, including the taxpayer’s name, the address and Social Security number or other taxpayer identification number associated with each such account, the account number and balance in each such account and such other information as may be required by the commissioner for the purposes of administering the data match system. For the purposes of this section, “account” means a demand deposit account, checking or negotiable order of withdrawal account, savings account, time deposit account or money market mutual fund account.

(b) (1) A financial institution shall not be liable to any person for (A) disclosing information to the commissioner or the commissioner’s designee pursuant to this section, or (B) any other action taken in good faith to comply with the requirements of subsection (a) of this section.

(2) Notwithstanding the provisions of § 12-15, a financial institution may provide return information received pursuant to the data match system to (A) a service provider engaged by the financial institution to carry out the data processing and data receipt and transmission functions, to the extent necessary for the financial institution to comply with the requirements of subsection (a) of this section, and (B) an authorized representative of a government regulatory authority having jurisdiction over the financial institution, to the extent required by such representative in the course of such representative’s duties. No person receiving return information pursuant to this subdivision shall further disclose such return information.