Whenever practicable, the examination of personally identifiable employee medical information shall be performed onsite with a minimum of medical information taken offsite in a personally identifiable form. The principal investigator, in each instance of access, is primarily responsible for ensuring that personally identifiable employee medical information is used and kept secured in accordance with this chapter. The principal investigator, the medical records officer, the Commissioner or the Commissioner's authorized representative, and any other authorized individual listed on a written access order may permit the examination or use of personally identifiable employee medical information by MOSH personnel and contractors who have: A need for access; and Appropriate qualifications for the purpose for which they are using the information. MOSH personnel or contractors are not authorized to examine or otherwise use personally identifiable employee medical information unless so permitted. If a need exists, access to personally identifiable employee medical information may be provided to: An assistant attorney general assigned to MOSH; and A MOSH contractor who: Is a physician, or Has contractually agreed to abide by the requirements of this chapter and to implement directives and instructions regarding them. MOSH personnel and contractors are authorized to use personally identifiable employee medical information only for the purposes for which it was obtained unless the: Specific written consent of the affected employee is obtained to permit information to be used for another purpose; or Procedures in Regulation .05 of this chapter are repeated with respect to using the information for another purpose.