(a) No state entity may have access to or obtain from a financial institution financial records of any customer except as set forth in section four of this article or under the following circumstances:
(1) The customer has executed a written authorization pursuant to section three of this article;