(a) The CDRH shall maintain a patient health record service which shall be conveniently located and adequate in size and equipped to facilitate the accurate processing, checking, indexing and filing of all patient health records.

(b) The patient health record service shall be organized to provide a system of health record maintenance that protects the confidentiality of patient health information in conformance with all federal and state laws and regulations.

(c) There shall be adequate staff to perform the functions of the service. If a qualified registered health information technician or a registered health information administrator is not responsible for the supervision of the service, such a professional shall be employed as a consultant to develop policy and procedures for the service that are in conformity with accepted principles of professional record keeping practice and current state and federal laws and regulations regarding the confidentiality of health information.