For persons and entities that hold a state license, registration, or certificate issued by a state agency other than the Department of Consumer Protection, the act provides that its provisions restricting the dissemination of SSNs and on safeguarding personal information are enforceable by the agency that issued the credential using its existing statutory and regulatory authority.