A managed care entity shall demonstrate, as provided in Form GID PPA-1, that it has in place procedures designed to assure compliance with all applicable state and federal laws regarding the confidentiality of patient information and reporting requirements.
Ga. Comp. R. & Regs. R. 120-2-80-.09
O.C.G.A. Secs. 33-2-9, 33-20A-2, 33-20A-4, 33-20A-5, 33-20A-8.