N.Y. Comp. Codes R. & Regs. tit. 10 § 50-4.7

Current through Register Vol. 46, No. 25, June 18, 2024

Section 50-4.7 - Employee training

(a) Department employees are to be trained with respect to responsibilities and authorization to access personal health-related, information.

(b) Employees authorized by supervisors to access personal health-related information are to be advised in writing that they shall not:

(1) examine documents or computer data containing personal health-related information unless required in the course of official duties and responsibilities;

(2) remove from the unit or copy such documents or computer data unless acting within the scope of assigned duties;

(3) discuss the content of such documents or computer data with any person unless that person has authorized access and the need to know the information discussed; and

(4) illegally discriminate, abuse or harass a person to whom personal health-related information applies.

N.Y. Comp. Codes R. & Regs. Tit. 10 § 50-4.7