The QIO must establish and implement procedures to provide patients, practitioners, and institutions under review with the following information—

(a) The title and address of the person responsible for maintenance of QIO information;

(b) The types of information that will be collected and maintained;

(c) The general rules governing disclosure of QIO information; and

(d) The procedures whereby patients, practitioners, and institutions may obtain access to information about themselves.