Unless otherwise prohibited by law, any state agency that maintains a personal information system shall, upon request and proper identification of any data subject, or a data subject's authorized agent, grant the subject or agent the right to inspect and to receive at reasonable, standard charges for document search and duplication, in a form comprehensible to the subject or agent:

1. (a) all personal information about the data subject, unless otherwise provided by statute, whether the information is a matter of public record or maintained on a confidential basis, except in the case of medical and psychological records, where the records shall, upon written authorization of the data subject, be given to a physician or psychologist designated by the data subject;
2. (b) the nature and sources of the personal information, except where the confidentiality of the sources is required by statute; and

3. (c) the names and addresses of any recipients, other than those with regular access authority, of personal information of a confidential nature about the data subject, and the date, nature, and purpose of the disclosure.

   As added by Acts 1977, P.L.21, SEC.1. Amended by P.L.215-2016, SEC.3.