1. A. In General. The Secretary shall issue policies, as appropriate, to ensure that all records and other information are maintained in a secure fashion to prevent loss, destruction, or unauthorized access.

2. B. Elements. Policies under §A of this regulation shall, at a minimum:

   1. (1) Identify the staff positions responsible for the custody and maintenance of records and information;
   2. (2) Warn all employees of the Department and of all private-sector providers that they may not disclose or knowingly permit the disclosure of any confidential record or information to any unauthorized person; and
   3. (3) Establish procedures to monitor and track access to all records and information.

Authority: Human Services Article, §§9-204 and 9-219; Courts and Judicial Proceedings Article, §3-8A-27; Annotated Code of Maryland

Effective date: June 18, 2007 (34:12 Md. R. 1067)