(a)  The Commissioner is responsible for the overall administration and implementation of the procedures contained in the rules in this Section, including making the final determinations concerning:

(1)           Access to personally identifiable medical information; and

(2)           Inter-agency transfer or public disclosure of personally identifiable medical information.

(b)  Medical Records Coordinator.  The Commissioner shall designate an OSH Division employee to oversee the security procedures established in the rules in this Section.

(c)  Medical Records Administrators.  The Commissioner shall designate an OSH Division employee at each field location to maintain a log of uses and transfers of personally identifiable medical information for each file, including the name of each person accessing the information.  The Medical Records Administrators shall also have primary control of the locked cabinet or vault where such records are stored and shall not allow access to the information contained in the cabinet to any person not authorized by the rules in this Section.

(d)  Principal OSH Investigator.  The Principal OSH Investigator shall be the OSH Division employee in each instance of access to personally identifiable employee medical information who is made primarily responsible for ensuring that the examination and use of this information is performed in the manner prescribed by the rules in this Section.


History Note:        Authority G.S. 95-133;

Eff. March 1, 2010;

Pursuant to G.S. 150B-21.3A rule is necessary without substantive public interest Eff. March 1, 2016.