W. Va. Code R. § 114A-1-10

Current through Register Vol. XLI, No. 50, December 13, 2024

Section 114A-1-10 - Data Retention and Initial Use and Disclosure Privacy and Security Requirements

10.1. The APCD program shall retain the data in a secure manner that prevents unauthorized access and ensures confidentiality, integrity and availability of all data transmitted to the APCD, at the levels required by the HIPAA Security and Privacy Rules, 45 CFR § 164.102et seq. and shall be encrypted per NIST Special Publication 800-111, Guide to Storage Encryption Technologies for End User Devices, November 2007.

10.2. The Secretary or its vendor shall assess the completeness and quality of data submitters' submissions in order to determine compliance with established data reporting requirements and standards. The Secretary shall disclose data back to the respective data submitter, where the completeness and quality review indicates a problem with the data, and such disclosure is required to facilitate the data collection process. For purposes of completeness and quality assessment, all personal identifiers shall remain encrypted. Results of the completeness and quality assessments may be shared with the APCD's Advisory Board.