(a) A financial institution may not disclose to any person, except to the customer or the customer's duly authorized agent, any financial records relating to such customer unless the customer has authorized disclosure to such person or the financial records are disclosed in response to (1) a certificate signed by the Commissioner of Administrative Services or the Commissioner of Social Services pu