(1) All requests for data under this section must comply with the requirements of RCW 43.70.052 and this section. The department will not release data to an individual or entity requesting data from the department pursuant to this section until all the requirements of this section have been completed to the satisfaction of the department.

(2) The data released pursuant to this section will only be in the data file format prescribed by the department.

(3) An individual or entity submitting a data request under this section must submit all of the following on the form or in the format required by the department:

(a) A completed application on the form provided by the department;

(b) A signed data use agreement with the department that conforms with WAC 246-455-400;

(c) All information required in subsection (4) of this section; and

(d) All fees required by WAC 246-455-990.

(4) An individual or entity submitting a data request under this section must submit all of the following information to the department:

(a) Name, title, organizational affiliation, and contact information (mailing address, telephone number, and email address) of the requestor, the organization official authorized to execute agreements, the organization information technology security officer, and the organization privacy officer;

(b) Purpose or intended use of the data being requested, including any proposed redisclosure of the data;

(c) Length of time data is needed or length of the project;

(d) Physical and electronic security measures to be taken to assure confidentiality and security of identifying information including storage of data, and provision for return or destruction of the information at the conclusion of use;

(e) Names and titles of all persons who will have access to the data;

(f) The plan for dissemination of the results and certification to abide by the department's small numbers guidelines; and

(g) Years of data requested.

(5) The department may request additional information regarding the request for data under this section. If additional information is requested, the individual or entity must submit the information within 30 days of the department's request or the request for data may be denied.

(6) The individual or entity must download the data from the secured file transfer site within two weeks. If after the two weeks, the requestor has not retrieved the data, the individual or entity must submit a new request and payment.

(7) The department may deny a request for data if the individual or entity submitting a data request under this section fails to meet any of the requirements of this chapter or RCW 43.70.052.