There shall be a written policy governing confidentiality, access to, duplication of and dissemination of information from the records.
6 Pa. Code § 11.196
This section cited in 6 Pa. Code § 11.13 (relating to administration and organization); and 6 Pa. Code § 11.212 (relating to applicability).