The medical university may enter into agreements to furnish data collected in the registry to other states' Parkinson's disease registries, federal Parkinson's disease control agencies, local health officers, or health researchers for the study of Parkinson's disease. Before confidential information is disclosed to those agencies, officers, researchers, or out-of-state registries, the requesting entity shall agree in writing to maintain the confidentiality of the information and, if a researcher, shall:
(1) Obtain approval of the researcher's institutional review board for the protection of human subjects established in accordance with 45 CFR 46; and
(2) Provide documentation to the medical university that demonstrates to the medical university's satisfaction that the researcher has established the procedures and ability to maintain the confidentiality of the information.