12-35-105-390 Confidentiality and security of personnel records

Article 4
Human Resources

A. The provider shall maintain an organized system to manage and protect the confidentiality of personnel files and records.

B. Physical and data security controls shall exist for personnel records maintained in electronic databases.

C. Providers shall comply with requirements of the Americans with Disabilities Act and the Virginians with Disabilities Act regarding retention of employee health-related information in a file separate from personnel files.