A data provider must establish and maintain written policies and procedures that are reasonably designed to achieve the objectives set forth in subparts B and C of this part, including paragraphs (b) through (d) of this section.
Get notified when this obligation is modified in proposed, final, or codified rules.
9927226b2ba6e017