The commissioner of health and human services shall adopt rules, pursuant to RSA 541-A, relative to: I. The types of data which each facility shall be required to file under RSA 126:25. II. The form in which data shall be filed under RSA 126:25. III. The times at which data shall be filed under RSA 126:25. IV. User fees which shall be assessed persons requesting data under RSA 126:28, 126:30, and 141-B:9. V. Confidentiality of data collected and disclosed under this subdivision subject to the provisions of RSA 126:28. VI. Procedures and written requirements for obtaining, using, and protecting data provided by the department of health and human services under RSA 126:28.