No credit bureau doing business in this state shall use all or part of a consumer’s social security number as the sole factor when determining whether a credit report in its files matches the identity of a person who is the subject of a credit inquiry from a user of credit reports. When a social security number is used as a factor, a credit bureau may disclose a credit report in its files to an inquiring user of credit reports only if the name also matches the identity of the person who is the subject of the inquiry.