1. An authorized recipient of personal information may resell or redisclose the information for any use permitted under section 39-33-05.
2. The department shall require any authorized recipient who resells or rediscloses personal information to maintain for a period of not less than five years records as to the person receiving the information and the permitted use for which it was obtained and to make these records available for inspection by the department upon request.