Exempts the following from disclosure under the public records act: Personally identifiable information of employees, and other security information, of a private cloud service provider that has entered into a criminal justice information services agreement as contemplated by the United States department of justice criminal justice information services security policy as authorized by 28 C.F.R. Part 20.