Minnesota Administrative Rules

1205.0600 ACCESS TO CONFIDENTIAL DATA.

Subpart 1.

General.

Pursuant to Minnesota Statutes, sections 13.02, subdivision 3; and 13.05, the responsible authority shall comply with the following rules concerning access to confidential data.

Subp. 2.

Who may see confidential data.

Access to confidential data is available only to the following:

A.

individuals within the entity whose work assignments reasonably require access; and

B.

entities and agencies who are authorized by statute, including Minnesota Statutes, section 13.05, or federal law to gain access to that specific data.

Subp. 3.

Access procedures.

The responsible authority shall establish written procedures to assure that access may be gained only by those parties identified in subpart 2.

In the drafting and administration of those procedures, the responsible authority shall provide measures by which data subjects or their authorized representatives shall be informed, upon request, if they are the subjects of confidential data.

The responsible authority shall not disclose the actual confidential data to the data subjects, but shall inform them whether confidential data concerning them is or is not retained.

The responsible authority shall take reasonable measures to assure that the person making inquiry is actually the individual data subject or the authorized representative of the data subject. Reasonable measures include, but are not limited to:

A.

requiring the inquiring person to appear at the office of the entity to make his/her request;

B.

requiring the inquiring person to provide identification; or

C.

requiring the notarized signature of any data subject who is unable to appear at the offices of the entity.

Statutory Authority:

MS s 13.07

Published Electronically:

July 13, 2007