Code of Maryland Regulations
Title 10 - MARYLAND DEPARTMENT OF HEALTH
Part 3
Subtitle 10 - LABORATORIES
Chapter 10.10.11 - Biological Agents Registry Program
Section 10.10.11.19 - BAR Information Security Standards - General

Universal Citation: MD Code Reg 10.10.11.19

Current through Register Vol. 51, No. 19, September 20, 2024

A. A trusted partner shall protect and maintain BAR information in a secure manner by limiting access only to a BAR information custodian who is:

(1) An individual designated by the trusted partner; and

(2) Authorized by the Department in a trusted partner agreement.

B. Before the Department shares BAR information with a trusted partner, the trusted partner shall:

(1) Develop, implement, and maintain administrative, physical, and technical security measures and practices to protect and safeguard the integrity, confidentiality, and availability of BAR information by managing and supervising the:
(a) Selection, execution, and use of security measures to protect BAR information; and

(b) Conduct of personnel in relation to the protection of BAR information;

(2) Assess potential risks and vulnerabilities to the BAR information in its possession using a BAR information security self-assessment checklist provided by the BAR Program; and

(3) Submit a:
(a) Completed BAR information security self-assessment; and

(b) Document verifying that the trusted partner's BAR information custodian has successfully undergone a security risk assessment as described in 42 CFR § 73.7.

C. If a BAR information custodian believes that the security of BAR information has been or is suspected to have been misused, mishandled, lost, stolen, or otherwise compromised, the BAR information custodian shall immediately notify the:

(1) BAR Program; and

(2) Individuals who signed the BAR information custodian's trusted partner agreement.

Disclaimer: These regulations may not be the most recent version. Maryland may have more current or accurate information. We make no warranties or guarantees about the accuracy, completeness, or adequacy of the information contained on this site or the information linked to on the state site. Please check official sources.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.