(a) The Office may conduct periodic audits of a hospital's patient medical records for its CABG surgery patients. Audits may, at the Office's discretion, be performed at the hospital location.

(b) The Office shall notify a hospital a minimum of 2 weeks before the date of an audit. Upon notification that an audit is planned, a hospital shall designate a person to serve as the audit contact person. A hospital shall provide to the Office the contact person's name, title, telephone number, and electronic mail address.

(c) A hospital shall retrieve and make available the requested patient medical records for an audit, and if requested by the Office, provide a reasonable space in which the Office may conduct an audit.

(d) Data abstracted during an audit may, at the Office's discretion, replace data for a given record submitted in a report filed by a hospital. Replacement data shall be used in calculating risk-adjusted mortality rates for hospitals and physicians.