(1) For the purpose of reviewing drug prices and conducting affordability reviews, the board (as established in chapter 70.405 RCW) and the health care cost transparency board (established in chapter 70.390 RCW) may access all data collected under RCW 43.71C.020 through 43.71C.080 and any analysis prepared by the authority.

(2) Advisory group members may not access or review any confidential information.

(3) The information collected by the board pursuant to RCW 70.405.040 is not subject to public disclosure under chapter 42.56 RCW.

(4) The authority provides data only after the data recipient, as defined by this chapter, has signed a nondisclosure agreement. The authority may prohibit access to or use of the data by a data recipient who violates the nondisclosure agreement.

(5) Data recipients must keep data confidential by:

(a) Accessing, using, and disclosing information only in accordance with this section and consistent with applicable statutes, regulations, and policies;

(b) Having a public policy purpose to access and use the confidential information according to chapter 70.405 RCW;

(c) Protecting all confidential information against unauthorized use, access, disclosure, or loss by employing reasonable security measures in alignment with the agency information system security plan, including physically securing any computers, documents, or other media containing confidential information and viewing confidential information only on secure workstations in nonpublic areas;

(d) Destroying all confidential information according to document retention requirements;

(e) Adhering to the confidentiality requirements in this section after the data recipient is no longer an authorized data recipient under chapter 70.405 RCW; and

(f) Acknowledging that the data recipient may be responsible for liability arising from misuse of the data.

(6) Data recipients must not:

(a) Disclose any confidential information, as defined by WAC 182-52-0010, or otherwise publicly release the confidential information;

(b) Use or disclose any confidential information for any commercial or personal purpose, or any other purpose that is not authorized in chapter 70.405 RCW;

(c) Attempt to identify people who are the subject of the confidential information;

(d) Discuss confidential information in public spaces in a manner in which unauthorized individuals could overhear;

(e) Discuss confidential information with unauthorized individuals, including spouses, domestic partners, family members, or friends;

(f) Have any conflicts of interests under the Ethics in Public Service Act that would prevent the data recipient from accessing or using confidential information; and

(g) Share information received according to this chapter with any person who is not authorized to receive confidential information as specified by this chapter.