(a) The entity shall protect records subject to this part from destruction, deterioration, unauthorized access, modification and/or data corruption.

(b) The entity shall notify the Secretary if prescribed records are substantially destroyed, damaged, accessed and modified without authorization, or otherwise corrupted.