An association which determines to maintain any of its records by means of data processing services shall so notify the commissioner, in writing, at least ninety (90) days prior to the date on which such maintenance of records will begin. Such notification shall include identification of the records to be maintained by data processing services and a statement as to the location at which such records will be maintained. Any contract, agreement or arrangement made by an association pursuant to which data processing services are to be performed for such association shall be in writing and shall expressly provide that the records to be maintained by such services shall at all times be available for examination and audit.