(4) Each registered agency shall be accountable for all confidential and exempt information received by authorized users. The agency shall have an auditable, continuous chain of custody record of the receipt and transfer of confidential and exempt information. When confidential and exempt information is transferred from one agency to another during the transaction of official business, the receiving agency shall maintain the confidential and exempt information in the same manner. see full law