(A) The medicaid director shall adopt rules under section 5160.02 of the Revised Code implementing sections 5160.45 to 5160.481 of the Revised Code and governing the custody, use, disclosure, and preservation of the information generated or received by the department of medicaid, county departments of job and family services, other state and county entities, contractors, grantees, private entities, or officials participating in the administration of medical assistance programs. The rules shall be adopted in accordance with Chapter 119. of the Revised Code. The rules may define who is an "authorized representative" for purposes of sections 5160.45 and 5160.46 of the Revised Code. The rules shall specify conditions and procedures for the release of information, which may include both of the following:

1. (1) Permitting a provider of a service under a medical assistance program limited access to information that is essential for the provider to render the service or to bill for the service rendered;
2. (2) Permitting a contractor, grantee, or other state or county entity limited access to information that is essential for the contractor, grantee, or entity to perform administrative or other duties on behalf of the department or a county department.