RPSs must meet the following requirements for sharing, securing, and retaining residential students' records:
(1) Store and secure residential student records by:
(a) Keeping any identifying and personal information about residential students and their families:
(i) Confidential; and
(ii) In a secure place inaccessible to residential students, unauthorized personnel, and the public; and
(b) Maintaining these records on-site while residential students are enrolled;
(2) Provide the department with access to residential student records to verify records are maintained as required by licensing requirements, except for records protected by the:
(a) HIPAA; and
(b) Washington My Health My Data Act; and
(3) Keep residential student records:
(a) At a secure location either on-site or off-site when they are no longer enrolled; and
(b) According to their record retention schedule.