105 CMR 164.626
Confidentiality
Patient-specific information shall be privileged and confidential and shall be made available
only in conformity with all applicable state and federal laws and regulations regarding the
confidentiality of patient records including, but not limited to, 42 CFR Part 2, and 45 CFR Parts
160 and 164 (HIPAA Privacy and Security Rules) if applicable.