Each Department of Mental Health facility or crisis intervention program funded by the Department of Mental Health shall have and utilize a written policy and procedure for ensuring the confidentiality and security of records which conforms to the requirements of state and federal confidentiality laws, including but not limited to:

1. (a) a description of the process and requirements for disclosure of confidential information;
2. (b) copies of forms for documenting the disclosure of confidential information and for obtaining the written consent of the patient when such consent is required; and,
3. (c) staff training in the requirements of state and federal laws related to confidentiality of client records.

(Effective December 21, 1990)