The board shall establish and maintain procedures to ensure that the privacy, confidentiality, and security of patient information collected, recorded, transmitted, and maintained is not disclosed except as provided in § 34-20E-7 . Source: SL 2010, ch 175 , § 6.