California Code, Business and Professions Code - BPC § 3778

Notwithstanding any other provision of law, the board may contract with a collection service for the purpose of collecting outstanding fees, fines, or cost recovery amounts, and may release personal information, including the birth date, telephone number, and social security number of any applicant or licensee for this purpose.  The contractual agreement shall provide that the collection service shall not inappropriately use or release personal information, and shall provide safeguards to ensure that the information is protected from inappropriate disclosure.  The contractual agreement shall hold the collection service liable for inappropriate use or disclosure of personal information.