Unless otherwise authorized by law, the Department: Shall keep all applicant and recipient personal information confidential; May not disclose personal information kept on a recipient without written consent of the: Recipient; or Recipient’s parent or legal guardian; Shall comply with the laws and regulations concerning the privacy and security of protected health information under: Health-General Article, Title 4, Subtitle 3, Annotated Code of Maryland; and The Health Insurance Portability and Accountability Act of 1996 (HIPAA), 42 U.S.C. §§1320d et seq., as amended, the HITECH Act, 42 U.S.C. §§17932, et seq., as amended, and 45 CFR Parts 160 and 164, as amended, and their implementing regulations; and Shall ensure that all interactive video technology-assisted communication comply with HIPAA patient privacy and security regulations.