SDCL § 32-5-149: Retention of records by certain recipients.

Any authorized recipient, except a recipient of an individual record under § 32-5-148, who resells or rediscloses personal information shall maintain for a period of at least five years records as to the information obtained and the permitted use for which it was obtained and shall make such records available for inspection by the department, upon request.