Patient- and resident-specific information shall be privileged and confidential and shall be made available only in conformity with all applicable state and federal laws and regulations regarding the confidentiality of patient and resident records including, but not limited to, 42 CFR Part 2, and 45 CFR Parts 160 and 164 (HIPAA Privacy and Security Rules) if applicable.
105 CMR, § 164.084