The provider must protect the confidentiality of each participant's information, including verbal, electronic, and written forms. Participant information must be protected regardless of the form or storage method of the records. Participant information may not be released without valid legal consent except as otherwise provided by law.
404 Neb. Admin. Code, ch. 5, § 005