A third party who is authorized pursuant to this article shall:

1. Maintain records in a form and manner prescribed by the director.

2. Allow access to the records during regular business hours to authorized representatives of the director or any law enforcement agency to ensure compliance with all applicable statutes and rules.