The state controller serving as the state social security administrator shall take such actions as may be necessary to ensure compliance with 42 U.S.C. § 418 and for this purpose shall have the power and authorization to inspect and copy, at any reasonable time, the records maintained by an agency whenever it is necessary for such compliance purposes. Access shall include, but not be limited to, examining, copying, transferring, receiving and making use of records, papers, letters, correspondence and transactions, whether printed or electronic. Such records may include otherwise nonpublic confidential employer and individual information necessary for the purposes of complying with 42 U.S.C. § 418. The administrator as recipient will implement, maintain and comply with technical and physical safeguards to protect the security, confidentiality and integrity of information consistent with the confidentiality rules and requirements of the issuing department or agency. For purposes of this section, "agency" shall mean each department, division, public body corporate and politic, elected and appointed board and commission, office and institution, educational or otherwise and instrumentalities thereof, including agencies hereinafter created in state and local government as set forth in chapter 11, title 59, Idaho Code.