Current through Register Vol. 48, 12, December 27, 2024
Section 71-908 - Security ProceduresA. Agency files containing personally identifiable employee medical information shall be segregated from other agency files. When not in active use, files containing this information shall be kept secured in a locked cabinet or vault.B. The SC/OSH Medical Records Officer and the Principal SC/OSH Investigator shall each maintain a log of uses and transfers of personally identifiable employee medical information and lists of coded direct personal identifiers, except as to necessary uses by staff under their direct personal supervision.C. The photocopying or other duplication of personally identifiable employee medical information shall be kept to the minimum necessary to accomplish the purposes for which the information was obtained.D. The protective measures established by the subarticle apply to all worksheets, duplicated copies, or other agency documents containing personally identifiable employee medical information.E. Intra-agency transfers of personally identifiable employee medical information shall be by hand delivery, United State mail, or equally protective means. Inter-office mailing channels shall not be used.