(a) A person who does business in the state, including the business of government, may not request or collect from an individual the individual's social security number. This subsection does not prohibit a person from asking for another form of identification from the individual.

(b) The prohibition in (a) of this section does not apply

(1) if the person is authorized by local, state, or federal law, including a regulation adopted under AS 45.48.470, to demand proof of the individual's social security number, to request or collect the individual's social security number, or to submit the individual's social security number to the local, state, or federal government;

(2) if the person is engaging in the business of government and

(A) is authorized by law to request or collect the individual's social security number; or

(B) the request or collection of the individual's social security number is required for the performance of the person's duties or responsibilities as provided by law;

(3) to a person subject to or a transaction regulated by the Gramm-Leach-Bliley Financial Modernization Act for a purpose authorized by the Gramm-Leach-Bliley Financial Modernization Act;

(4) to a person subject to or a transaction regulated by the Fair Credit Reporting Act for a purpose authorized by the Fair Credit Reporting Act;

(5) if the request or collection is for a background check on the individual, for fraud prevention, for medical treatment, for law enforcement or other government purposes, for the individual's employment, including employment benefits, or for verification of the individual's age;

(6) if the request or collection does not have independent economic value, is incidental to a larger transaction or a larger anticipated transaction, and is necessary to verify the identity of the individual;

(7) to an insurer regulated by AS 21; in this paragraph, “insurer” has the meaning given in AS 21.97.900; or

(8) to a hospital service corporation or a medical service corporation regulated under AS 21.87; in this paragraph, “hospital service corporation” and “medical service corporation” have the meanings given in AS 21.87.330.