(a) A credit union is not required to disclose or produce to a third party or permit a third party to examine a record pertaining to the affairs of a credit union member unless:
(1) the request is made in connection with an examination or audit by a government agency authorized by law to examine credit unions;
(2) the member consents to the disclosure or production of the record; or
(3) the request is made by the department or is made in response to:
(A) a subpoena or other court order; or
(B) an administrative subpoena or summons issued by a state or federal agency as authorized by law.
(b) The commission may authorize the disclosure of information relating to a credit union member under circumstances and conditions that the commission determines are appropriate or required in the daily operation of the credit union’s business.

(c) The commission may adopt reasonable rules relating to the:
(1) permissible disclosure of nonpublic personal information about the accounts of credit union members; and
(2) duties of the credit union to maintain confidentiality of member accounts.
(d) The directors, officers, committee members, and employees and any honorary or advisory directors of a credit union shall hold in confidence all information regarding transactions of the credit union, including information concerning transactions with the credit union’s members and the members’ personal affairs, except to the extent necessary in connection with making, extending, or collecting a loan or extension of credit, or as otherwise authorized by this section, commission rules adopted under Subsection (c), or other applicable law.