All TNCs shall adopt a privacy policy to protect the personal identifying information of TNC riders. The privacy policy shall:
(1) Include provisions regarding the disclosure of personal identifying information learned through a complaint or during the course of an investigation;
(2) Be consistent with all applicable state and federal laws; and
(3) Be submitted to the department as part of the application for a license.