A licensee who electronically stores information concerning patients shall:
1. Store and share such information using a secure server; and
2. Ensure that any electronic device on which such information is stored or that may be used to access such information is encrypted and requires a password.