1. Purchasing records shall be kept in a secure location and made available only to the commissioner and his or her designee, or a police officer, and shall be used solely for the purposes of enforcement of this subchapter and of state and local anti-graffiti laws and rules.
2. a. Purchasing records shall be kept by dealers of etching acid for one year.
b. All purchasing records and any other information pertaining to the purchase or sale of etching acid shall be disposed of by the following methods only:
i. shredding the records before the disposal of the records; or
ii. destroying the personal information contained in the records; or
iii. modifying the records to make the personal information unreadable; or
iv. taking actions consistent with commonly accepted industry practices reasonably believed to ensure that no unauthorized person will have access to the personal information contained in the records.