(a) Confidentiality of members' accounts. No credit union officer, director, committee member or employee may disclose to any person, other than the member, or to any company or governmental body the individual savings, shares, or loan records of any credit union member, contained in any document or system, by any means unless specifically authorized to do so in writing by such members, except as follows:
  (1) reporting credit experience to a bona fide credit reporting agency, another credit union, or any other bona fide credit-granting business and/or merchants information exchange, provided that applicable state and federal laws and regulations pertaining to credit collection and reporting are followed;
  (2) furnishing information in response to a valid request from a duly constituted government agency or taxing authority, or any subdivision thereof, including law enforcement agencies;
  (3) furnishing information, orally or in written form, in response to the order of a court of competent jurisdiction or pursuant to other processes of discovery duly issuing from a court of competent jurisdiction;
  (4) furnishing reports of loan balances to co-borrowers, co-makers, and guarantors of loans of a member and of share or deposit account balances, signature card information, and related transactions to joint account holders;
  (5) furnishing information to and receiving information from check and draft reporting, clearing, cashing and authorization services relative to past history of a member's draft and checking accounts at the credit union; or
  (6) as otherwise authorized by law, including access by examiners of the Department.
(b) Non-disclosure statement. Nothing in this rule shall prohibit the credit union from releasing the name and address of members to assist the credit union in its marketing efforts or sale of third party products, provided, however, that the credit union obtains a written non-disclosure statement providing assurances that the information will be used exclusively for the benefit of the credit union and no other.
(c) Privacy policy. Each credit union shall develop, implement and maintain a written policy on the protection of nonpublic personal information of individual members in its possession. This policy shall be consistent with the disclosure and reporting requirements applicable to federally insured credit unions as addressed in Part 716 of NCUA Rules and Regulations.
(d) Relation to federal laws. This section shall not be construed as altering or affecting any applicable federal statute, regulation, or interpretation that affords a member greater protection than provided under this section.

Source Note: The provisions of this §91.608 adopted to be effective July 8, 1994, 19 TexReg 4932; amended to be effective August 14, 2000, 25 TexReg 7634; amended to be effective July 11, 2004, 29 TexReg 6630