Notwithstanding any provision of law to the contrary, and subject to Section 36-37-4, a public agency shall not do any of the following:

1. (1) Require any person or nonprofit organization to provide the public agency with personal information or otherwise compel the release of personal information.
2. (2) Release, publicize, or otherwise publicly disclose personal information in its possession.
3. (3) Request or require a current or prospective contractor or grantee of the public agency to provide a list of nonprofit organizations to which the current or prospective contractor or grantee has provided financial or nonfinancial support.

(Act 2023-128, §3.)