Data that contains confidential client identifying information MUST always be protected from unauthorized viewing or access. Neither the passwords nor reports can be shared outside the authorized appointed persons.
Unless authorized and properly encrypted,
reports must NOT be shared electronically, via email or removable electronic
media or saved in a non-secured environment. Reports (electronic or hard
copies) must not be left visible to unauthorized individuals. All copies of
reports (electronic and hard copies) must be destroyed immediately after use.