The authority, the department, and service contracting entities shall establish record retention schedules for maintaining data reported by service contracting entities under RCW 70.320.020. For data elements related to the identity of individual clients, the schedules may not allow the retention of data for longer than required by law unless the authority, the department, or service contracting entities require the data for purposes contemplated by RCW 70.320.020 or to meet other service requirements. Regardless of how long data reported by service contracting entities under RCW 70.320.020 is kept, it must be protected in a way that prevents improper use or disclosure of confidential client information.