All records and other information kept by the Department or any program about any youth shall be maintained and properly secured to preserve their confidentiality. An employee of the Department or of any program, public or private, may not disclose or knowingly allow the disclosure of any confidential record or information to any person except in accordance with law. In General. The Secretary shall issue policies, as appropriate, to ensure that all records and other information are maintained in a secure fashion to prevent loss, destruction, or unauthorized access. Elements. Policies under §A of this regulation shall, at a minimum: Identify the staff positions responsible for the custody and maintenance of records and information; Warn all employees of the Department and of all private-sector providers that they may not disclose or knowingly permit the disclosure of any confidential record or information to any unauthorized person; and Establish procedures to monitor and track access to all records and information. Human Services Article, §§9-204 and 9-219; Courts and Judicial Proceedings Article, §3-8A-27; Annotated Code of Maryland Effective date: June 18, 2007 (34:12 Md. R. 1067)