(1) Any person, as defined in WAC 182-70-030, may bring to the attention of the lead organization or the authority information concerning the inappropriate disclosure or use of protected information as set forth in RCW 43.371.050 and WAC 182-70-600.

(2) The authority must conduct an investigation unless it determines that the complaint is without merit or is frivolous, regardless of how the authority has received the information that led to that belief, including information derived from any audit conducted by or at the direction of the authority.