- (a) All records maintained by the NHBCP, including paper files, facsimile transmissions, or electronic data transfers, shall be strictly confidential except as allowed by RSA 91-A.
(b) All confidential information shall be kept in a secured area or safely stored electronically at all times as follows:
- (1) Paper records and computer discs shall be kept in locked, cabinets or a medical record room;
- (2) All individually identifiable health information stored in electronic files shall be password protected; and
- (3) All confidential notes or other materials entered into the NHBCP database, which are not required to be stored, shall be shredded immediately after use.
- (c) All staff members of NHBCP and any other persons given access to individually identifiable health information in the records maintained by the NHBCP shall sign a confidentiality agreement specified by the department requiring adherence to this part and the provisions pursuant to RSA 141-J:8, I.
- (d) In accordance with RSA 141-J:8, II, the department shall maintain a list of any persons other than NHBCP staff given access to individually identifiable health information.
Source. #9404, eff 3-5-09, EXPIRED: 3-5-17 New. #12333, INTERIM, eff 7-22-17, EXPIRES: 1-18-18; ss by #12448, eff 1-9-18