provided, however, that, notwithstanding the definition of personal information under Code Section 40-5-1, personal information furnished under this subparagraph shall be limited to name, address, and driver identification number and shall not include photographs, fingerprints, computer images, or medical or disability information. The personal information obtained by a business under this subparagraph shall not be resold or redisclosed for any other purpose without the written consent of the individual. Furnishing of information to a business under this subparagraph shall be pursuant to a contract entered into by such business and the state which specifies, without limitation, the consideration to be paid by such business to the state for such information and the frequency of updates.
OCGA § 40-5-2