§ 480.115 Requirements for maintaining confidentiality.

(a) Responsibilities of QIO officers and employees. The QIO must provide reasonable physical security measures to prevent unauthorized access to QIO information and to ensure the integrity of the information, including those measures needed to secure computer files. Each QIO must instruct its officers and employees and health care institution employees participating in QIO activities of their responsibility to maintain the confidentiality of information and of the legal penalties that may be imposed for unauthorized disclosure of QIO information.