Policies and procedures shall be established for ensuring the confidentiality of all patients' social information.