(a) The agency and each facility shall require all staff to report immediately and according to agency policy any knowledge, suspicion, or information regarding an incident of sexual abuse that occurred in a facility; retaliation against detainees or staff who reported or participated in an investigation about such an incident; and any staff neglect or violation of responsibilities that may have contributed to an incident or retaliation. The agency shall review and approve facility policies and procedures and shall ensure that the facility specifies appropriate reporting procedures, including a method by which staff can report outside of the chain of command.

(b) Staff members who become aware of alleged sexual abuse shall immediately follow the reporting requirements set forth in the agency's and facility's written policies and procedures.

(c) Apart from such reporting, staff shall not reveal any information related to a sexual abuse report to anyone other than to the extent necessary to help protect the safety of the victim or prevent further victimization of other detainees or staff in the facility, or to make medical treatment, investigation, law enforcement, or other security and management decisions.

(d) If the alleged victim is under the age of 18 or considered a vulnerable adult under a State or local vulnerable persons statute, the agency shall report the allegation to the designated State or local services agency under applicable mandatory reporting laws.