(1) Recipients who provide protected personal information to subrecipients when a person must sign a release form under RCW 46.52.130, must establish processes to hold all subrecipients accountable for:

(a) Obtaining and maintaining the release form prior to requesting protected personal information;

(b) Verifying the release form is properly executed before requesting the protected personal information; and

(c) The consent is rightfully executed by the named individual or their authorized legal representative.

(2) The process for requesting driving records must include verifying the consent forms contain the required information in WAC 308-10A-901.

(3) The recipient must make records available to the department demonstrating the process for obtaining consent is in use and is effective. The department will establish minimum requirements for such processes in its data sharing agreement with the recipient.