Records. A provider shall: Retain and reproduce, upon request for a minimum of 6 years, records and reports required by the Department for the administration of services; and Be responsible for maintaining patient records for services that it provides in accordance with the approved Department retention schedule. Records referred to in §A(1) of this regulation include: Documentation of personal interviews; Diagnosis and treatment recommendations; Records of professional visits and consultations; Consultant notes which shall be appropriately initialed or signed; Medical and laboratory data, including X-rays; and Other data as may be required by applicable federal and State regulations. Confidentiality. A provider shall assure that the release of information from an eligible applicant's record is handled in accordance with Health-General Article, §§4-301—4-309, Annotated Code of Maryland, COMAR 10.03.02, and other State and federal laws and regulations governing the confidentiality of records.