Page 2127

Article 4. Security. Rule 7 AAC 85.400. General security requirements 7 AAC 85.405. Electronic access 7 AAC 85.410. Physical access 7 AAC 85.400. General security requirements. (a) The department will, and a provider, including a former provider, shall maintain all written or computerized records that are subject to this chapter in a secure room, locked file cabinet, safe, or other similar secure place when not in use. When the records are in use, the department and a provider, including a former provider, shall ensure that access to the records is restricted to persons who are authorized under applicable state or federal law to have access to the records. (b) The department will, and a provider, including a former provider, shall keep the records in a manner that will permit the review of financial and administrative information with minimal disclosure of clinical information and without disclosure of identifying information except when necessary for a purpose authorized under this chapter, and in accordance with applicable state or federal law. (Eff. 9/23/2004, Register 171) Statutory Authority: Authority: AS 18.05.040 AS 47.30.475 AS 47.31.090

AS 18.23.100 AS 47.30.477 AS 47.37.030

AS 47.05.010 AS 47.30.530 AS 47.37.040

AS 47.06.010 AS 47.30.540 AS 47.37.140

AS 47.07.030 AS 47.30.590

AS 47.07.040 AS 47.30.660 Editor’s note: Effective July 1, 2022, Executive Order 121 split the former Department of Health and Social