(2) Subsection (1) of this section does not prohibit the board from making the following disclosures:
(a) Disclosures made with the written consent of the person to whom the personal identifier information pertains.
(b) Disclosures of information that a license or certificate holder is required by law or rule to disclose to the public, including but not limited to board-issued license or certificate numbers.
(c) Disclosures for the purpose of causing, conducting or assisting an investigation into possible violations of law, rules or regulations, including but not limited to disclosures to an administrative agency, law enforcement agency or district attorney office. A public body receiving information from the board under this paragraph may not disclose the information except as necessary to an investigation or as necessary to criminal, civil or contested case proceedings. [2009 c.226 §2]