(1) Each licensed physician and physician assistant shall develop a written plan to ensure the security of patient medical records. The plan shall address at least the following:
(a) The storage and proper disposal, if appropriate, of patient medical records;
(b) The disposition of patient medical records in the event the licensee dies, retires, or otherwise ceases to practice or provide medical care to patients; and
(c) The method by which patients may access or obtain their medical records promptly if any of the events described in paragraph (b) of this subsection (1) occurs.
(2) Upon initial licensure under this article and upon renewal of a license, the applicant or licensee, as applicable, shall attest to the board that he or she has developed a plan in compliance with this section.
(3) A licensee shall inform each patient, in writing, of the method by which the patient may access or obtain his or her medical records if an event described in paragraph (b) of subsection (1) of this section occurs.
(4) A licensee who fails to comply with this section shall be subject to discipline in accordance with section 12-36-118.
(5) The board may adopt rules as necessary to implement this section.