That might actually work. Many states have approximately the same reporting requirement, and that spells out a reasonable process to follow after a report has been made; it's also, perhaps, a process that's serious enough to discourage too much CYA reporting.
It might be nice to have a clear storage protocol spelled out, however. I'm not too wild about "... if they were not destroyed."
"Once the writer in every individual comes to life (and that time is not far off), we are in for an age of universal deafness and lack of understanding."
(Milan Kundera, Book of Laughter and Forgetting, 1980)