The department will develop rules establishing procedures for acquiring both direct and indirect access to the database, procedures for revoking access to the database, standards for the denial of requests for direct and indirect access to the database, as well as any other measures related to access, database operation or database management identified during the rulemaking process as promoting the privacy of confidential prescription information after statutorily authorized release from the database.