12VAC35-105-390. Confidentiality and security of personnel records.
A. The provider shall maintain an organized system to manage and protect the confidentiality of personnel files and records.
B. Physical and data security controls shall exist for personnel records maintained in electronic databases.
C. Providers shall comply with requirements of the Americans with Disabilities Act and the Virginians with Disabilities Act regarding retention of employee health-related information in a file separate from personnel files.
Statutory Authority
§ 37.2-203 of the Code of Virginia.
Historical Notes
Derived from Virginia Register Volume 18, Issue 18, eff. September 19, 2002; amended, Virginia Register Volume 28, Issue 5, eff. December 7, 2011.