(1) The vendor must automatically deactivate patient and designated provider records in the database upon expiration of a recognition card.

(2) Patients and designated providers may request to be deactivated in the database before the expiration of their recognition card using the process established by the department.

(3) The authorizing health care practitioner may request deactivation of a patient or designated provider from the database if the patient no longer qualifies for the medical use of cannabis. This request must be made using the process established by the department.