There shall be written policies and procedures which specify who has access to medical records, under what conditions records may be removed from the ASF, and under what conditions medical record information may be released. Medical records are the property of the ASF, and they may not be removed from the premises except for court purposes. Copies may be made available for authorized appropriate purposes, such as insurance claims and practitioner review.
28 Pa. Code § 563.10