Except when communicating with the parties listed in §B of this regulation and unless otherwise authorized by law, the agent of an applicant, or the agent of a recipient, the Department: Shall keep all applicant and recipient personal information confidential; May not disclose personal information kept on an applicant or recipient without written consent of the: Applicant; Recipient; Applicant’s parent or legal guardian; or Recipient’s parent or legal guardian; Shall comply with the laws and regulations concerning the privacy and security of protected health information under: Health-General Article, Title 4, Subtitle 3, Annotated Code of Maryland; and The Health Insurance Portability and Accountability Act of 1996 (HIPAA), 42 U.S.C. §§1320d et seq., as amended, the HITECH Act, 42 U.S.C. §§17932, et seq., as amended, and 45 CFR Parts 160 and 164, as amended, and their implementing regulations; and Shall ensure that all interactive video technology-assisted communication comply with HIPAA patient privacy and security regulations.