 2.08. RBTs only discuss confidential information with those who need to know the information. They share information for job-related purposes only. Confidential information includes, but it's not limited to, information about anyone whom the RBT works to, information about anyone to whom the RBT provides services. RBTs maintain confidentiality when handling records under their control. This includes written, electronic, and any other format. Handling a record may include creation storage, access, transfer, and disposal. This code is a paragraph on HIPAA. If it's medical information, it is part of that act and it is protected. If it has a client's name on it and it's not locked up, you're breaking a rule. You need to follow these folks. It's respect and dignity and federal law. In an RBT scenario, you're going to have materials that are used as visual stimuli and prompts and whatnot for these kiddos. And they need to have them locked up and stored securely. And any information that is gathered needs to follow these rules. All your data, your reports, your session notes, your thoughts, your comments, anything needs to be cared for appropriately, stored appropriately, and handled appropriately.