<?xml version='1.0' encoding='utf-8'?>
<regulation prefix="Regulation" num=".17" citation="COMAR 12.15.01.17" title_num="12" subtitle_num="15" chapter_num="01" heading="Auditing.">
  <paragraph num="A.">
    <text>Audit of CHRI.</text>
    <paragraph num="(1)">
      <text>As required by applicable federal and State statutes and regulations, criminal justice agencies, CHRI repositories, and noncriminal justice agencies shall be audited by the Central Repository for compliance with applicable laws, regulations, and agreements related to the security, dissemination, completeness, and accuracy of CHRI.</text>
    </paragraph>
    <paragraph num="(2)">
      <text>The Central Repository shall conduct audits of a random sample of State and local criminal justice agencies, CHRI repositories, and noncriminal justice agencies to ensure that CHRI is:</text>
      <paragraph num="(a)">
        <text>Accurate and complete; and</text>
      </paragraph>
      <paragraph num="(b)">
        <text>Collected, reported, and disseminated in accordance with the provisions of Criminal Procedure Article, Title 10, Subtitle 2, Annotated Code of Maryland.</text>
      </paragraph>
    </paragraph>
    <paragraph num="(3)">
      <text>At a minimum, the audit shall evaluate compliance with applicable rules, regulations, agreements, and laws pertaining to physical, personal, and operational security, dissemination, completeness, and accuracy of CHRI.</text>
    </paragraph>
    <paragraph num="(4)">
      <text>As required, other methods, procedures, and standards for auditing criminal justice agencies, CHRI repositories, and noncriminal justice agencies may be established by the Central Repository.</text>
    </paragraph>
  </paragraph>
  <paragraph num="B.">
    <text>Criminal justice agencies, CHRI repositories, and noncriminal justice agencies shall retain and provide access to CHRI source documents, dissemination logs, security manuals, and other CHRI related information as deemed necessary to perform the audit in §A of this regulation.</text>
  </paragraph>
  <paragraph num="C.">
    <text>Except for provisions under §D of this regulation, information required under §B of this regulation shall be retained by an agency subject to a Central Repository CHRI audit according to the agency’s approved records retention schedule.</text>
  </paragraph>
  <paragraph num="D.">
    <text>Information required under §B of this regulation related to employment shall be destroyed as soon as the employee who is the subject of the information is no longer employed by the agency.</text>
  </paragraph>
</regulation>