(a) The division shall promulgate reasonable rules and regulations to carry out the provisions of this act. The rules shall include:
(i) Standards and procedures to ensure the security and privacy of all criminal history record information and that the information is used only for criminal justice and other lawful purposes; and (ii) Standards and procedures in conformance with this act relating to access to and dissemination of criminal history record information, research, system security, record completeness and accuracy, training, intrastate and interstate exchanges, user agreements, audits and procedures for review and challenge of records.