A security guard agency may not divulge information obtained while providing services unless: directed by the client for whom the services are provided; authorized by subsection (b) of this section; or required by law. If, while providing services, a security guard agency obtains any information about a criminal offense, the agency may divulge the information to: a law enforcement officer; the Attorney General or a representative of the Attorney General; or a State’s Attorney or a representative of a State’s Attorney. Except as provided in subsection (d) of this section, an individual who is employed by a security guard agency may not divulge to anyone other than to authorized staff of the agency any information that: was acquired by the employee or other agency staff while providing services for the agency; and relates to the assignment in which services are provided. An employee of a security guard agency may divulge information that is restricted under subsection (c) of this section: as directed by the security guard agency; or on a request made by the Secretary in the course of an investigation by the Secretary.