Final answer:
Staff must keep medical records in a secure and confidential manner to ensure appropriate healthcare and protect patient privacy.
Step-by-step explanation:
Medical records must be kept by healthcare staff in a secure and confidential manner. They are usually stored electronically in a computer system, but can also be kept in physical files in a locked cabinet. The reason for keeping medical records is to ensure that patients receive appropriate and effective healthcare, as well as to protect patient privacy and adhere to legal requirements.