(1) A consumer reporting agency may furnish a consumer report only under the following circumstances:

(a) In response to an order of a court having jurisdiction to issue such an order;

(b) In accordance with the written instructions of the consumer to whom it relates; and

(c) To a person which the consumer reporting agency has reason to believe:

(I) Intends to use the information in connection with a credit transaction involving the consumer on whom the information is to be furnished and involving an extension of credit to, or review or collection of an account of, the consumer and if the consumer chooses to provide his or her social security number to the user, the user shall include the social security number with, or as a supplement to, a request for a consumer report, and include the social security number when transmitting subsequent credit information to a consumer reporting agency; or

(II) Intends to use the information for employment purposes only if an applicant or employee is first informed that a credit report may be requested in connection with his or her application for employment and the consumer consents in writing to the same; or

(III) Intends to use credit scoring information in connection with the underwriting or rating of insurance involving the consumer and the person establishes that the consumer has received written notification, or notification in the same medium as the application for insurance, that a credit report may be requested in connection with his or her application for insurance, and that credit scoring information may be used to determine either the consumer's eligibility for insurance or the premium to be charged to the consumer; or

(IV) Intends to use the information in connection with a determination of the consumer's eligibility for a license or other benefit granted by a governmental instrumentality required by law to consider an applicant's financial responsibility or status; or

(V) Otherwise has a legitimate business need for the information in connection with a business transaction involving the consumer; or

(VI) Intends to use the information for any purpose allowed under the federal "Fair Credit Reporting Act" and rules promulgated pursuant to that act.

(2) A consumer reporting agency may not, by contract or otherwise, prohibit a user of any consumer report or investigative consumer report from, upon request of the consumer, disclosing and explaining the contents of the report or providing a copy of the report to the consumer to whom it relates if adverse action against the consumer has been taken or is contemplated by the user of the consumer report or investigative consumer report, based in whole or in part on the report. No user or consumer reporting agency shall be held liable or otherwise responsible for a disclosed or copied report when acting pursuant to this subsection (2) nor shall disclosure or provision of a copy of the report, by themselves, make the user a consumer reporting agency.