(1) Under RCW 42.56.625, records in the database containing names and other personally identifiable information of qualifying patients and designated providers are exempt from public disclosure, inspection, or copying.

(2) The vendor must retain database records for at least five calendar years to permit the WSLCB and Washington department of revenue to verify eligibility for tax exemptions.

(3) Authorization forms cannot be retained or copied by an endorsed outlet, and information from the form cannot be retained by the endorsed outlet or entered into other manual or electronic data collection or point of sale systems unless required by law or expressly authorized in writing by the patient or designated provider.

(4) Recognition cards cannot be retained by an endorsed outlet, and may only be copied by the endorsed outlet when required by law.