Notwithstanding any other law, a data protection impact assessment is protected as confidential and shall be exempt from public disclosure, including under the Maryland Public Information Act.