employee medical files

I've always worked in healthcare and have kept all personnel files along with employee medical files. During State and JCAHO surveys I (HR) was asked for the employee medical files, which I delivered and I have never been reprimanded for having access to them. I am wondering (under the new HIPPA regs) if HR can still be the keeper of employee medical files or does it have to be the Infection Control Nurse.
Comments
My $0.02 worth.
DJ The Balloonman