653—2.14 (17A,22) Personally identifiable information. This rule describes the nature and extent of personally identifiable information which is collected, maintained, and retrieved by the agency by personal identifier in record systems as defined in rule 2.1(17A,22). For each record system, this rule describes the legal authority for the collection of that information and the means of storage of that information. The description also indicates whether the record system contains any confidential information, and includes the legal authority for confidentiality. The records systems maintained by the agency are:
	 2.14(1) Records of agency disciplinary hearings. These records contain information about licensees and certificants who are the subject of an agency disciplinary proceeding or other action. This information is collected by the agency pursuant to the authority granted in Iowa Code chapters 147, 147A, 148, 148C, and 272C. This information is stored electronically and on paper. The information contained in “records of closed” board hearings is confidential in whole or in part pursuant to Iowa Code sections 21.5(4) and 272C.6 or other provisions of the law.
	 2.14(2) Information in complaint and investigation files maintained by the agency for purposes of licensee discipline. This information is required to be kept confidential pursuant to Iowa Code section 272C.6(4). However, it may be released to the licensee once a disciplinary proceeding is commenced by the filing of formal charges and the notice of hearing.
	 2.14(3) Information on nonlicensee investigation files maintained by the agency. This information is a public record except to the extent that certain information may be exempt from disclosure under Iowa Code section 22.7 or other provision of the law.
	 2.14(4) Licensee disciplinary proceedings. The following information regarding licensee disciplinary proceedings:
	  a.   	 Formal charges and notices of hearing.
	  b.   	 Completed records of open disciplinary hearings. If a hearing is closed pursuant to Iowa Code section 272C.6(1), the record is confidential under Iowa Code section 21.5(4) or 272C.6.
	  c.   	 Final written decisions imposing sanctions, including informal stipulations and settlements; or dismissing the charges, in whole or in part.
	 2.14(5) Continuing education records. These records contain educational information about persons licensed or certified by the agency. This information is collected pursuant to the authority granted in Iowa Code chapter 272C. This information is stored on paper only.
	 2.14(6) Examination records. These records contain information about applicants for any of the following examinations: United States Medical Licensing Examination (USMLE), Federation of State Medical Boards of the United States, Inc.	- Federation Licensing Examination (FLEX), National Board of Medical Examiners, National Board of Osteopathic Medical Examiners, National Commission for the Certification of Acupuncturists, individual state or territorial medical licensing boards, Licentiate of the Medical Council of Canada examination (LMCC), Special Purpose Examination (SPEX), or other examination approved by the board. These records may also contain information about applicants who pursue licensure by endorsement, score transfer, or other means. The information is collected by the agency pursuant to the authority granted in Iowa Code chapters 147, 148, and 148E and is stored electronically and on paper. Portions of the examination records are confidential in part pursuant to Iowa Code sections 22.7(1), 22.7(19), and 147.21.
	 2.14(7) Investigative reports. These records contain information about the subjects of board investigations and the activities of board investigators and agents. The records include a variety of attachments such as interviews; drug audits; medical records; pharmacy records; exhibits; police reports; and investigators’ comments, conclusions, and recommendations. This information is collected by the agency pursuant to the authority granted in Iowa Code chapters 147, 147A, 148, and 148C. This information is stored electronically on microfilm and on paper. The information contained in these records is confidential in whole or in part pursuant to Iowa Code sections 22.7, 147.21, and 272C.6(4).
	 2.14(8) Licensure and certification records. These records contain information about doctors of medicine and surgery and osteopathic medicine and surgery; and registered acupuncturists who are licensed or registered by the agency. The information is collected by the agency pursuant to the authority granted in Iowa Code chapters 147, 148, and 148E and is stored on paper, in automated data processing systems, on microfiche, on CD-ROM, floppy disk, and in the state archives. These records may contain information which is confidential under subrule 2.13(2).
	 2.14(9) Personnel records. These records contain personal information about board members, registered peer review committee members, and staff. The files include payroll records, biographical information, medical information relating to disability, performance reviews and evaluations, disciplinary information, information required for tax withholding, information concerning employee benefits, affirmative action reports, and other information concerning the employer-employee relationship. This information is stored on paper and microfiche. The personal information contained in these records may be confidential in whole or in part pursuant to Iowa Code section 22.7.
	 2.14(10) Routine probation supervision reports. These reports contain information about licensees or certificants who have been placed on professional probation as the result of an official agency disciplinary action and contain information relating to the licensees’ or certificants’ compliance with the terms of probation and are confidential under Iowa Code section 272C.6.
	 2.14(11) Routine consent agreement monitoring reports. These reports contain information about licensees or certificants who have been granted licensure or certification under special terms and conditions through official agency action, and contain information relating to the licensees’ or certificants’ compliance with the terms of the consent agreement and are confidential under Iowa Code section 272C.6.