(1) The department may provide dispenser and prescriber data that includes indirect patient identifiers to the Washington state hospital association's coordinated quality improvement program (CQIP).

(2) Before providing data to the association's CQIP the department will enter into a data use agreement that outlines the following:

(a) The data fields that will be provided;

(b) The security methods used to protect and transmit the data;

(c) Any allowed redisclosure of the data provided to the CQIP must be consistent with the purpose of the data use agreement; and

(d) How indirect patient identifiers will be protected from any attempts to reidentify the patient or their family.

(3) All requests for, uses of, and disclosures of prescription monitoring information by the requesting entity must be consistent with the mandate as outlined in RCW 70.225.040 and this chapter.