However, the PRA does not require the disclosure of credit card numbers, debit card numbers, electronic check numbers, card expiration dates, or bank or other financial account numbers supplied to [the City] for the purpose of electronic transfer of funds, except when disclosure is expressly required by law.