DVR may release personal information for audit, evaluation for program purposes, fulfilling reporting requirements, or research if the results would improve the quality of life or VR services for people with disabilities. When DVR has obtained personal information from another organization or program, it will release that information only when permitted by the rules or laws governing the release of protected information applicable to that organization or program. Before DVR shares any personal information, the organization, agency, or individual must agree to the following conditions:

(1) The information must only be used by people directly involved in the audit, evaluation, reporting, or research;

(2) The information must only be used for the reasons approved by DVR in advance;

(3) The information must be kept secure and confidential;

(4) The information must not be shared with any other parties, including you or your representative; and

(5) The final product or report produced by the organization, agency, or individual must not contain any personal information that would identify you without your written consent.