# WAC 308-10A-401: WAC 308-10A-401. Standards for audits of recipients

> Washington · Regulations · In force

URL: https://www.frixlaw.com/law-library/statutes/STATE_WA_ADC_308_10A_401

## Section

- **Citation:** WAC 308-10A-401
- **Heading:** WAC 308-10A-401. Standards for audits of recipients
- **Jurisdiction:** Washington
- **Kind:** Regulations
- **Status:** In force
- **Text as of:** August 14, 2026
- **Source:** Compiled text
- **Location:** Washington Administrative Code / Title 308 / Chapter 308-10A / Section 308-10A-401

## Text

When the department requires an audit under this section, it may accept an audit performed in the previous 12 months when it meets standards in the data sharing agreement and is performed by an auditor that meets independent third-party auditor qualifications.
For recipients receiving lists:
(1) Audit procedures must test for the presence of required policies and administrative, technical, or physical controls to reasonably conclude the controls are effective and in use by the recipient.
(2) Audit reports must provide documentation on the procedures, and the results of such procedures, used to determine whether controls align with requirements in the data sharing agreement.
For recipients receiving individual records of protected personal information, audit reports must demonstrate reasonable procedures were used to conclude each recipient is compliant with requirements in the data sharing agreement.

## Nearby sections

- [WAC 308-10A-100 WAC 308-10A-100. Definitions](https://www.frixlaw.com/law-library/statutes/STATE_WA_ADC_308_10A_100.md)
- [WAC 308-10A-201 WAC 308-10A-201. Recipient compliance requirements](https://www.frixlaw.com/law-library/statutes/STATE_WA_ADC_308_10A_201.md)
- [WAC 308-10A-202 WAC 308-10A-202. Vetting of subrecipients](https://www.frixlaw.com/law-library/statutes/STATE_WA_ADC_308_10A_202.md)
- [WAC 308-10A-203 WAC 308-10A-203. Subrecipient disqualification](https://www.frixlaw.com/law-library/statutes/STATE_WA_ADC_308_10A_203.md)
- [WAC 308-10A-204 WAC 308-10A-204. Subrecipient audit requirements](https://www.frixlaw.com/law-library/statutes/STATE_WA_ADC_308_10A_204.md)
- [WAC 308-10A-205 WAC 308-10A-205. Required written consent audits](https://www.frixlaw.com/law-library/statutes/STATE_WA_ADC_308_10A_205.md)
- [WAC 308-10A-301 WAC 308-10A-301. Recipient-subrecipient data sharing agreement](https://www.frixlaw.com/law-library/statutes/STATE_WA_ADC_308_10A_301.md)
- [WAC 308-10A-401 WAC 308-10A-401. Standards for audits of recipients](https://www.frixlaw.com/law-library/statutes/STATE_WA_ADC_308_10A_401.md)
- [WAC 308-10A-402 WAC 308-10A-402. Selection of an auditor](https://www.frixlaw.com/law-library/statutes/STATE_WA_ADC_308_10A_402.md)
- [WAC 308-10A-403 WAC 308-10A-403. Independent third-party auditor qualifications](https://www.frixlaw.com/law-library/statutes/STATE_WA_ADC_308_10A_403.md)
- [WAC 308-10A-404 WAC 308-10A-404. Statement of compliance](https://www.frixlaw.com/law-library/statutes/STATE_WA_ADC_308_10A_404.md)
- [WAC 308-10A-405 WAC 308-10A-405. Corrective action plans](https://www.frixlaw.com/law-library/statutes/STATE_WA_ADC_308_10A_405.md)
- [WAC 308-10A-500 WAC 308-10A-500. Permissible uses pertaining to RCW 46.12.630 ](https://www.frixlaw.com/law-library/statutes/STATE_WA_ADC_308_10A_500.md)
- [WAC 308-10A-700 WAC 308-10A-700. Research](https://www.frixlaw.com/law-library/statutes/STATE_WA_ADC_308_10A_700.md)

---

Source: Frix Law Library, https://www.frixlaw.com/law-library/statutes/STATE_WA_ADC_308_10A_401. Check the current official text before relying on it. Not legal advice.