Getting and using a particular candidate's salary history from a third-party source during the hiring process is also forbidden by this law. It doesn't just cover the candidate being asked directly.

Aggregate salary data, not specific to the individual, remains allowed.