A narcotic treatment program shall physically secure and maintain the confidentiality of all patient records in accordance with 42 CFR 2.22 (relating to notice to patients of Federal confidentiality requirements) and § 709.28 (relating to confidentiality).
28 Pa. Code § 715.11
This section cited in 28 Pa. Code § 715.20 (relating to patient transfers).