(1) Unless an alternative standard for a specified record type, form, or format is expressly stated a pharmaceutical firm must maintain and retain records required as evidence of compliance with statutes and rules enforced by the commission in a readily retrievable form and location for at least two years from the date the record was created or received, whichever date is later.

(2) A pharmaceutical firm must allow the commission, or its designee, access to the pharmaceutical firm's records upon request for the purposes of monitoring compliance with statutes and rules enforced by the commission.