That might actually work. Many states have approximately the same reporting requirement, and that spells out a reasonable process to follow after a report has been made; it's also, perhaps, a process that's serious enough to discourage too much CYA reporting.
It might be nice to have a clear storage protocol spelled out, however. I'm not too wild about "... if they were not destroyed."
Formerly known as Vanya.