Current through Register Vol. 46, No. 43, October 23, 2024
Section 50-4.7 - Employee training(a) Department employees are to be trained with respect to responsibilities and authorization to access personal health-related, information.(b) Employees authorized by supervisors to access personal health-related information are to be advised in writing that they shall not: (1) examine documents or computer data containing personal health-related information unless required in the course of official duties and responsibilities;(2) remove from the unit or copy such documents or computer data unless acting within the scope of assigned duties;(3) discuss the content of such documents or computer data with any person unless that person has authorized access and the need to know the information discussed; and(4) illegally discriminate, abuse or harass a person to whom personal health-related information applies.N.Y. Comp. Codes R. & Regs. Tit. 10 §§ 50-4.7