Individuals shall adequately maintain and appropriately secure records of professional services rendered, research and scholarly activities conducted, and products dispensed, and they shall allow access to these records only when authorized or when required by law.