The hospital maintains the security and integrity of health information.

(1)

The hospital develops and implements a written policy that addresses the security of health information, including the following: - Access and use of health information - Integrity of health information against loss, damage, unauthorized alteration, unintentional change, and accidental destruction - Intentional destruction of health information - When and by whom the removal of health information is permitted Note: Removal refers to those actions that place health information outside the hospital's control.