(1) Each naturopathic doctor shall develop a written plan to ensure the security of patient medical records. The plan must address at least the following:
(a) The storage and proper disposal of patient medical records;
(b) The disposition of patient medical records in the event the naturopathic doctor dies, retires, or otherwise ceases to practice or provide naturopathic medical care to patients; and
(c) The method by which patients may access or obtain their medical records promptly if any of the events described in paragraph (b) of this subsection (1) occurs.
(2) Upon initial registration under this article, the applicant or registrant shall attest to the director that he or she has developed a plan in compliance with this section.
(3) A naturopathic doctor shall inform each patient in writing of the method by which the patient may access or obtain his or her medical records if an event described in paragraph (b) of subsection (1) of this section occurs.
(4) The director may adopt rules reasonably necessary to implement this section.