37-7-1508. Registry information retention -- destruction. The board shall retain the information collected for the registry for up to 3 years, as established by rule. After 3 years, the board shall destroy the information unless it is being used as part of an active investigation.