(3)(a) The authority shall maintain records of the information disclosed through the prescription monitoring program including, but not limited to:(A) The identity of each person who requests or receives information from the program and any organization the person represents;(B) The information released to each person or organization; and(C) The date and time the information was requested and the date and time the information was provided.(b) Records maintained as required by this subsection may be reviewed by the Prescription Monitoring Program Advisory Commission. see full law