(a) No person who, in the course of business, acquires or has access to personal information concerning an individual, including, but not limited to, the individual's residence address, employment address, or hours of employment, for the purpose of assisting private entities in the establishment or implementation of carpooling or ridesharing programs, shall disclose that information to any other person or use that information for any other purpose without the prior written consent of the individual