Sec. 9. The bureau may, before disclosing personal information, require the requesting person to satisfy certain conditions for the purpose of ascertaining:
(1) the correct identity of the requesting person;
(2) that the use of the disclosed information will be only as authorized; or
(3) that the consent of the person who is the subject of the information has been obtained.
The conditions may include the making and filing of a written application on a form prescribed by the bureau and containing all information and certification requirements required by the bureau.