(a) Arkansas Rehabilitation Services may release personal information to an organization, agency, or individual engaged in audit, evaluation, or research, but only:

1. (1) For purposes directly connected with administration of Arkansas Rehabilitation Services’ vocational rehabilitation program; or
2. (2) In order to significantly improve quality of life for Arkansas Rehabilitation Services clients.

(b) Before release of personal information under this section, the organization, agency, or individual must:

1. (1) Sign a written confidentiality agreement;
2. (2) Assure Arkansas Rehabilitation Services that the information will be used only for the purposes for which it is provided;
3. (3) Assure Arkansas Rehabilitation Services that the information will be released only to persons officially connected with the audit, evaluation, or research;
4. (4) Assure Arkansas Rehabilitation Services that the information will not be released to the involved client;
5. (5) Assure Arkansas Rehabilitation Services that the information will be managed in a manner to safeguard confidentiality; and
6. (6) Assure Arkansas Rehabilitation Services that the final product will not reveal any personal identifying information without the informed written consent of the involved individual or the individual's representative.