(1) A fundamental precept of allowing the use of a certified service provider is to preserve the privacy of consumers by protecting their anonymity. With very limited exceptions, a certified service provider shall perform its tax calculation, remittance, and reporting functions without retaining the personally identifiable information of consumers.
(2) The department shall provide public notification to consumers, including purchasers claiming exemption from tax, of its practices relating to the collection, use, and retention of personally identifiable information.
(3) When personally identifiable information that has been collected and retained is no longer required to ensure the validity of exemptions from taxation by reason of the consumer's status or the intended use of the goods or services purchased, the information shall no longer be retained by the state of Washington.
(4) When personally identifiable information regarding an individual is retained by or on behalf of the state of Washington, this state shall provide reasonable access for the individual to his or her own information and a right to correct any inaccurately recorded information.
(5) If anyone other than a member state of the agreement, or other than a person authorized by Washington law or the agreement, seeks to discover personally identifiable information, the state of Washington shall make a reasonable and timely effort to notify the individual of the request.
(6) The provisions of this section may be enforced by petitioning the superior court of Thurston county for injunctive relief.