Regulation .03 Policies.
Regulation .03 Policies.LinkCopy Citation
A.
In General. The Secretary shall issue policies, as appropriate, to ensure that all records and other information are maintained in a secure fashion to prevent loss, destruction, or unauthorized access.
B.
Elements. Policies under §A of this regulation shall, at a minimum:
(1)
Identify the staff positions responsible for the custody and maintenance of records and information;
(2)
Warn all employees of the Department and of all private-sector providers that they may not disclose or knowingly permit the disclosure of any confidential record or information to any unauthorized person; and
(3)
Establish procedures to monitor and track access to all records and information.