The identifying information of district customers with covered accounts shall be kept confidential and shall be exempt from public disclosure to the maximum extent authorized by law, including RCW 42.56.230(5). The district board of commissioners also finds and determines that public disclosure of the district’s specific practices to identity, detect, prevent and mitigate identify theft may compromise the effectiveness of such practices and hereby directs that, under the program, knowledge of such specific practices shall be limited to the program administrator and those district employees and service providers who need to be aware of such practices for the purpose of preventing identity theft. [Res. 634 § 4, 2008.]