D.C. Code § 7-1206.01: Security requirement.

Mental health professionals, mental health facilities and data collectors shall maintain records of mental health information in a secure manner as to effectuate the purposes of this chapter. Any entity that receives mental health information shall have appropriate administrative, technical, and physical safeguards in place to protect the confidentiality of mental health information and shall promptly notify the Department of Mental Health in writing of any unauthorized disclosure or use of mental health information.