N.Y. Comp. Codes R. & Regs. tit. 10 § 50-4.7 - Employee Training With Respect to Intra-Agency (DoH) Access to and Disclosure of Personal Health-Related Information

This regulation governs the training of employees at the department of health with respect to handling the confidential person health-related information they have to handle.  The regulation requires that employees of the department of health be trained as to their responsibilities and authorization to access this confidential information.  The regulation states that employees authorized to access this confidential information should be advised in writing that:

• They may not examine documents or computer data containing this confidential information unless required by their official job responsibilities
• They may not remove any such documents or data from the unit office unless acting within the scope of their official duties
• They are not allowed to discuss the content of such documents and data with any person, unless that person is authorized to access the information and has a need to know the information discussed
• They are not allowed to illegally discriminate, abuse or harass a person based on this confidential information