(a) A public agency shall not:

(1) Require an individual to provide the public agency with personal information or compel the release of personal information;

(2) require a nonprofit organization to provide the public agency with personal information or compel the release of personal information;

(3) release or publicly disclose personal information in the possession of such public agency; or

(4) request or require a current or prospective contractor or grant recipient to provide the public agency with a list of nonprofit organizations to which the contractor or grantee has provided financial or nonfinancial support.

(b) Personal information shall be confidential and shall not be subject to the open records act, Kan. Stat. Ann. § 45-215 et seq., and amendments thereto. The provisions of this subsection shall expire on July 1, 2027, unless the legislature reviews and reenacts this provision pursuant to Kan. Stat. Ann. § 45-229, and amendments thereto.

(c) The provisions of this section shall not apply to:

(1) A report or disclosure required by article 41 of chapter 25 or article 2 of chapter 46 of the Kansas Statutes Annotated, and amendments thereto;

(2) a valid warrant issued for personal information by a court of competent jurisdiction;

(3) a lawful request for discovery of personal information in litigation if the person making such request:

(A) Demonstrates a compelling need for the personal information by clear and convincing evidence; and

(B) obtains a protective order barring disclosure of the personal information to any person not named in the litigation;

(4) admission of personal information as relevant evidence before a court of competent jurisdiction, except that no court shall disclose personal information unless such court makes a finding of good cause;

(5) a national securities association as defined in section 15A of the securities exchange act of 1934, as in effect on July 1, 2022, or any regulations adopted thereunder;

(6) any adult care home as defined in Kan. Stat. Ann. § 39-923, and amendments thereto;

(7) information provided to the attorney general as part of the registration process, or collected as part of the enforcement of, the charitable organizations and solicitations act, Kan. Stat. Ann. § 17-1759 et seq., and amendments thereto, except that information that directly identifies an individual as a donor of financial support to a nonprofit organization shall not be disclosed without the consent of the donor;

(8) information provided to the attorney general by any person, including, but not limited to, a consumer, supplier or related witness, collected as part of the enforcement of the Kansas consumer protection act, Kan. Stat. Ann. § 50-623 et seq., and amendments thereto, except that information that directly identifies an individual as a donor of financial support to a nonprofit organization shall not be disclosed without the consent of the donor;

(9) information concerning the staff, officers and the individuals designated to control funding needed to process and verify a request for a grant of funds from or a contract for goods or services with any public agency, except that information that directly identifies an individual as a donor of financial support to a nonprofit organization shall not be disclosed;

(10) a request by the department of revenue, the Kansas bureau of investigation or the Kansas legislature for information required for an audit, background check, examination or investigation, except that such information shall only be used in connection with the specific audit, background check, examination or investigation and for any related proceedings; and

(11) the collection of information related to boards of directors, officers, resident agents, incorporators and large capital holders of an organization in any report or disclosure required by any statute to be made with the secretary of state with the intent that it becomes a public record, except that information that directly identifies an individual as a donor of financial support to a nonprofit organization shall not be disclosed.

(d) (1) A person alleging a violation of this section may bring a civil action for injunctive relief or damages. Damages awarded pursuant to this section shall be not less than $7,500 for each violation of this section.

(2) The court may award reasonable attorney fees and costs to the complainant when the court determines such award is appropriate.

(3) A person who knowingly violates the provisions of this section is guilty of a class C nonperson misdemeanor.

(e) For the purposes of this section:

(1) “Nonprofit organization” means an organization that is exempt from federal income taxation pursuant to section 501(c) of the federal internal revenue code, has submitted an application with the internal revenue service for recognition of an exemption under section 501(c) of the federal internal revenue code or is a not-for-profit business entity organized under the Kansas general corporation code;

(2) “personal information” means any list, record, register, registry, roll, roster or other compilation of data of any kind that directly or indirectly identifies a person as a member, supporter or volunteer of or donor of financial or nonfinancial support to a nonprofit organization; and

(3) “public agency” means the state or any political or taxing subdivision of the state or any office, agency or instrumentality thereof.

(f) This section shall be known and may be cited as the charitable privacy act.