28 Pa. Code § 563.5
Medical records shall be stored to provide protection from loss, damage or unauthorized access.