S.2. THE INSTITUTION HAS POLICIES AND PROCEDURES TO ENSURE THE SECURITY AND CONFIDENTIALITY OF RECORDS.