Rule-making authority

(a) The Office of Technology, under the Department of Administration, may propose rules for legislative approval necessary to implement this article in accordance with §29A-3-1 et seq. of this code. (b) The rules shall: (1) Establish processes or means by which a commercial entity may meet the age verification requirements of this article; (2) Establish requirements for providing confirmation of the receipt of any information provided by a person seeking to verify age under this article; (3) Establish requirements for retaining, protecting, and securely disposing of any information obtained by a commercial entity or its agent as a result of compliance with the requirements of this article; (4) Require that information obtained by a commercial entity or its agent in order to comply with the requirements of this article are only retained for the purpose of compliance and may not be used for any other purpose; (5) Require if the Office of Technology permits an agent to process verification requirements required by this article, that the agent have its principal place of business in the United States of America.