The electronic provision of [clinical lab] test results shall be in accordance with any applicable federal law governing privacy and security of electronic personal health records. However, any state statute that governs privacy and security of electronic personal health records, shall apply ... and prevail over federal law if federal law permits.
Any health care provider choosing to use an electronic recordkeeping system shall develop and implement policies to include safeguards for confidentiality and unauthorized electronic access.
Use of electronic recordkeeping to store patient records shall ensure safety and integrity of the records at least to the extent of hard copy records. Upon request, access to electronically stored patient records shall be made available to the Division of Licensing and Certification staff. Policies and procedures should be developed to include safeguards for confidentiality of electronically stored patient health records
