| WAC Sections | |
| 308-10A-100 | Definitions. |
| 308-10A-201 | Recipient compliance requirements. |
| 308-10A-202 | Vetting of subrecipients. |
| 308-10A-203 | Subrecipient disqualification. |
| 308-10A-204 | Subrecipient audit requirements. |
| 308-10A-205 | Required written consent audits. |
| 308-10A-301 | Recipient-subrecipient data sharing agreement. |
| 308-10A-401 | Standards for audits of recipients. |
| 308-10A-402 | Selection of an auditor. |
| 308-10A-403 | Independent third-party auditor qualifications. |
| 308-10A-404 | Statement of compliance. |
| 308-10A-405 | Corrective action plans. |
| 308-10A-500 | Permissible uses pertaining to RCW 46.12.630. |
| 308-10A-700 | Research. |
| 308-10A-801 | Agents. |
| 308-10A-802 | Offshoring. |
| 308-10A-804 | Notification of misuse or unauthorized disclosure. |
| 308-10A-805 | Applications for data. |
| 308-10A-806 | Consent. |
| 308-10A-901 | Authorization to request a driving abstract. |
| 308-10A-902 | Data retention and destruction. |