(1) The retail sales records required under WAC 246-889-095 are confidential and accessible by the board of pharmacy and law enforcement agencies. Law enforcement may access the retail sales records for criminal investigations when, at a minimum, there is an articulated individualized suspicion of criminal activity.

(2) Each law enforcement agency's administrator, chief, sheriff, or other chief executive officer shall ensure:

(a) Only authorized employees have access to the databases;

(b) Each employee use his or her unique password or access code to access the databases;

(c) Each employee adheres to all state and federal laws regarding confidentiality; and

(d) As employees change, new passwords or access codes are assigned to new employees and passwords of ex-employees or transferred employees are removed.

(3) Retail sales records of restricted products, electronic or written, must be kept for a minimum of two years.

(4) Retail sales records must be destroyed in a manner that leaves the record unidentifiable and nonretrievable.