All records must be kept by the program director/manager under lock and key.

Data must be available to all individuals who need to see it.

Data should be kept on file for at least 1 year before being discarded.

Sensitive information (e.g., participant's name) needs to be protected.