(A) All personal information systems of the state medical board shall be maintained in accordance with chapter 1347. of the Revised Code.
(B) The executive director of the state medical board shall designate one or more persons to be directly responsible for the personal information systems maintained by the State Medical Board;
(C) An employee who initiates or otherwise contributes to any disciplinary or other punitive action against any individual who brings to the attention of appropriate authorities, the press, or any member of the public, evidence of unauthorized use of information contained in the Medical Board's personal information systems shall be disciplined at the discretion of the executive director and in a manner which he or she deems appropriate.
(D) If personal information contained in the Medical Board's personal information systems is not accurate, relevant, timely, and complete, this fact shall be directed to the attention of the executive director's designee(s), who shall take such action as he is deemed appropriate concerning the information system in order to assure fairness in any determination made with respect to the person on the basis of the information.
(E) The state medical board shall collect only personal information that is necessary and relevant to the functions that the board is required to perform by statute, ordinance, code, or rule. The executive director's designee(s) shall eliminate personal information from the system when he determines it is determined that the information is no longer necessary and relevant to those functions.