32-3-207. Confidentiality -- penalties. (1) (a) Any report of examination issued under 32-3-203, any report made by a credit union under 32-3-202, and any other credit union documentation maintained by the department of administration, other than those reports that are required to be published, must be considered confidential information. The information may not be imparted to persons who are not officially associated with the department, and the information contained in the reports and statements may be used by the department only in the furtherance of its official duties.
(b) The department may exchange information with federal credit union regulatory agencies and with the financial regulatory departments of other states. The department may furnish information to the legislative auditor for use in pursuit of official duties. A prosecuting official may obtain the information by court order.
(2) Any knowledge or information gained or discovered by the department in pursuance of its powers or duties is confidential information of the department. The information may not, except as provided in subsection (1)(b), be imparted to any person not officially associated with the department. The information may be used by the department only in the furtherance of its official duties.
(3) An employee or agent of the department who violates this section or willfully makes a false official report as to the condition of a credit union is guilty of a felony and must be removed from office. Upon conviction, the person shall be fined an amount not exceeding $1,000, be imprisoned in a state correctional facility for a term not exceeding 5 years, or both.