An individual’s name and address may not be distributed for commercial purposes, sold, or rented by an agency unless such action is specifically authorized by law.