The purpose of this chapter is to protect the substantial privacy interests involved in employee medical records by ensuring that: The Commissioner or the Commissioner's authorized representative will exercise authority to gain access to personally identifiable employee medical information only: After a careful determination of the need for this information, and With appropriate safeguards to protect individual privacy; Once the medical information is obtained, the examination and use of personally identifiable employee medical information obtained under this chapter is limited to only that information needed to accomplish the purpose for access; Personally identifiable employee medical information is: Retained only for the time needed to accomplish the purpose for access, Kept secure while being used, and Not disclosed to other agencies or members of the public, except in narrowly defined circumstances and as permitted or required by law; and Medically related information reported in a personally identifiable form, even if not specifically covered by the terms of this chapter, is handled with appropriate discretion and care befitting information concerning specific employees.