Subject to the requirements of 42 CFR Part 431 Subpart F, the PACE provider and its contractors may not release or disclose any information concerning a PACE participant to anyone other than the Department except with the written permission of the: PACE participant; or PACE participant's attorney, legal representative, or legal guardian. For all information, records, data, and data elements collected and maintained by the PACE provider to facilitate operations under this chapter, the PACE provider shall: Protect this information, records, data, and data elements from unauthorized disclosure, in accordance with the provisions of applicable federal and State laws and regulations; and Assure that access is limited by the PACE provider to persons or agencies requiring the information to perform their duties in accordance with this chapter or other duties authorized by the Department.