Nothing in this article shall be construed to give authority to any person, agency or corporation or other legal entity to invade the privacy of any citizen as defined by the constitution, the Legislature or the courts other than to the extent provided in this article.
Disclosure of criminal histories or other information that may directly or otherwise lead to the identification of the individual to whom such information pertains may not be made to any person, agency, corporation or other legal entity that has neither the "need to know" nor the "right to know" as determined by the commission pursuant to Section 41-9-594.
Ala. Code § 41-9-642 (1975)