Unless otherwise authorized by law, the Department: Shall keep all applicant and recipient personal information confidential; May not disclose personal information kept on an applicant or recipient without the written consent of the: Applicant; Recipient; Applicant’s parent or legal guardian; or Recipient’s parent or legal guardian; Shall comply with the laws and regulations concerning the privacy and security of protected health information under: Health-General Article, Title 4, Subtitle 3, Annotated Code of Maryland; and The Health Insurance Portability and Accountability Act of 1996 (HIPAA), 42 U.S.C; §§1320d et seq., as amended, the HITECH Act, 42 U.S.C. §§17932, et seq., as amended, and 45 CFR Parts 160 and 164, as amended, and their implementing regulations; and Shall ensure that all interactive video technology-assisted communication comply with HIPAA patient privacy and security regulations.