An IBHS agency shall ensure that records that contain protected health information, both written and electronic, are secured, maintained and disposed of in accordance with applicable Federal and State privacy and confidentiality statutes and regulations.
55 Pa. Code § 5240.43