(2) Any personally identifiable information, as defined in ORS 432.005, submitted to the authority under ORS 475C.795, 475C.821 or 475C.843 or pursuant to ORS 475C.856 is confidential and not subject to public disclosure under ORS 192.311 to 192.478.
(3) Any record that the authority keeps or maintains for purposes related to the installation or maintenance of a security system by a medical marijuana dispensary pursuant to rules adopted under ORS 475C.833 (10) is confidential and not subject to public disclosure under ORS 192.311 to 192.478. [Formerly 475B.885]