Generally, a State agency may not redisclose data received under the terms and conditions
            of its data exchange agreement with us without our prior written permission. We will
            only permit the redisclosure if it meets the following criteria:
         
         
            - 
               
                  • 
                     it is required by law or essential to the conduct of the applicable data exchange
                        activity, and
                      
 
 
- 
               
                  • 
                     it is authorized under a routine use. 
 
 
To the extent we approve a requested redisclosure, the State agency will ensure that
            any entity receiving the redisclosed data complies with certain requirements in the
            data exchange agreement. This includes the procedures and limitations on use, duplication,
            and redisclosure of our data; the administrative, technical, and physical security
            requirements governing all of the data we provide electronically to the State agency;
            and the specific guidance on safeguarding and reporting responsibilities for personally
            identifiable information. Refer questions on the proper use and redisclosure of our
            data to the regional PAC, as well as to the Office of Privacy and
            Disclosure.