All records shall be treated as confidential. Only authorized personnel shall have access to the records. The written authorization of the patient shall be presented and then maintained in the original record as authority for release of medical information outside the hospital.
28 Pa. Code § 115.27
This section cited in 28 Pa. Code § 115.28 (relating to ownership).