The department is required to develop and implement the privacy policies and security policies to protect protected health information exchanged through the Iowa health information network. The policies must be reviewed by the executive committee and advisory council and approved by the board prior to implementation. Any changes to the policies must go through the same review and approval process.
Iowa Admin. Code r. 641-206.3