[nullc]

I can find nothing in the bill that guarantees this, nor provides for any penalty for unauthorized disclosure. Am I missing something you can direct me to?

I can state that in practice, in attempting to social engineer my own legally protected information from banks and local government I have had nearly 100% success rate in obtaining it. The only solution is to not give them access to the data in the first place.

If this information is available 'only to law enforcement' as some have suggested here, that often means that essentially any law enforcement anywhere in the country for any reason. If you don't know someone who can look up tags for you, or addresses off drivers licenses ... you need to get out more. That level of protection is better than nothing, but it isn't particularly protected.

[sroussey]

Yes, it keeps randoms out. Be careful asking friends in law enforcement to look something up for you. Requests are logged. And if another law enforcement group has an alert set, you will get a visit asking why you were asking.