All originating and distant TMH sites shall comply with the rules and regulations concerning the privacy and security of protected health information under: Health-General Article, Title 4, Subtitle 3, Annotated Code of Maryland; and The Health Insurance Portability and Accountability Act of 1996 (HIPAA), 42 U.S.C. §§1320D et seq., as amended, and the implementing regulations at 45 CFR Parts 160 and 164, as amended.