The freestanding medical facility shall ensure that staff members develop a legible and appropriate medical record for each patient who visits the facility for treatment. Security and Disclosure of Medical Information. The freestanding medical facility shall: Maintain records in a secure manner that protects the confidentiality of patient information at all times; Develop and implement policies and procedures for disclosure of patient medical records and patient access to their medical records, including the costs for retrieving and copying records as defined in Health-General Article, §§4-301— 4-309, Annotated Code of Maryland; and Make medical records available to emergency medical services agencies for outcome data as directed by the Maryland Institute for Emergency Medical Services System. Retention. The medical record shall be retained as required by all federal and State laws and regulations and shall be made available promptly to the freestanding medical facility staff.