RPSs must meet the following requirements for sharing, securing, and retaining residential students' records:

1. (1) Store and secure residential student records by:

   1. (a) Keeping any identifying and personal information about residential students and their families:

      1. (i) Confidential; and
      2. (ii) In a secure place inaccessible to residential students, unauthorized personnel, and the public; and
   2. (b) Maintaining these records on-site while residential students are enrolled;

2. (2) Provide the department with access to residential student records to verify records are maintained as required by licensing requirements, except for records protected by the:

   1. (a) HIPAA; and
   2. (b) Washington My Health My Data Act; and

3. (3) Keep residential student records:

   1. (a) At a secure location either on-site or off-site when they are no longer enrolled; and
   2. (b) According to their record retention schedule.

[Statutory Authority: 2023 c 441 s 3, RCW 74.15.020, and chapter 43.216 RCW. WSR 26-03-054, s 110-146-0110, filed 1/15/26, effective 2/15/26.]