A provider shall be in compliance with COMAR 10.09.36.03 and 10.63.01.05. A provider of community-based substance use disorder services shall include: Community-based substance use disorder providers that: Are licensed by the Department as community-based substance use disorder providers pursuant to the requirements listed in Regulation .05 of this chapter; Maintain verification of licenses and credentials of all professionals employed by or under contract with the provider in their respective personnel files; and Require any physician assistant employed by the provider to have a delegation agreement with the supervising physician in accordance with COMAR 10.09.55.02 and .03; Federally qualified health centers in compliance with COMAR 10.09.08; or Opioid treatment programs that: Are licensed by the Department’s Behavioral Health Administration; Are approved by the U.S. Drug Enforcement Administration; and Comply with 42 CFR Part 8. A provider of substance use disorder services shall maintain adequate documentation of each contact with a participant as part of the medical record, which, at a minimum, includes: The date of service with start and end times; Documents all services received by the participant; The participant’s primary reason for the substance use disorder visit; A description of the service provided; Progress notes; and An official e-Signature, or a legible signature, along with the printed or typed name of the individual providing care, with the appropriate degree or title. The providers shall make the documentation required under Regulation .05C available, as requested to carry out required activities, to: The Department; The ASO; The Core Service Agency; The Local Addictions Authority; The Local Behavioral Health Authority; The Office of Inspector General of the Department; and The Office of the Attorney General Medicaid Fraud Control Unit. A provider shall comply with all federal statutes and regulations, including the Health Insurance Portability and Accountability Act, 42 U.S.C. §1320D et seq., and implementing regulations at 45 CFR Parts 160 and 164. If delivering services via telehealth, a provider shall comply with COMAR 10.09.49 and any subregulatory guidance issued by the Department.