105 C.M.R. 145.545
The unit shall develop policies to safeguard its medical records and the information therein against loss and use by unauthorized persons.