Qualifying patients and designated providers may request and receive their own authorization information from the database or information about any person or entity that has queried their name or information.

(1) A patient or designated provider may submit a request using a process and format established by the department for requesting and receiving information from the database.

(2) The department shall require proof of identity including, but not limited to, valid photographic identification prior to releasing any information to a patient or designated provider.

(3) The information will be delivered using a process and format established by the department.