Each provider of demonstration program services shall establish and implement a privacy plan to protect the privacy and confidentiality of a beneficiary's records.
The disclosure of information by a provider of demonstration program services shall be subject to all provisions of applicable District and federal laws governing the privacy and security of health and personal information.
Each provider of demonstration program services shall maintain complete beneficiary records, financial records covering its operations, and individual treatment plans, in accordance with the service requirements set forth in this chapter, and shall maintain each record for at least ten (10) years.
D.C. Mun. Regs. tit. 29, r. 29-8614