Section He-A 504.02 - Privacy and Confidentiality(a) All IDCMPs and IDSPs shall comply with the applicable privacy and confidentiality provisions in RSA 172:8-a, RSA 318-B:12, 42 CFR 401.105, 42 CFR Part 2, and the "Standards for Privacy for Individually Identifiable Health Information" (Privacy Rule), pursuant to the Administrative Simplification provisions of the Health Insurance Portability and Accountability Act of 1996 (HIPAA), 45 CFR Parts 160 and 164, Subparts A and E.(b) All applicable program data that is associated with a particular client, or could be associated with a particular client, shall be treated as public health information, consistent with the Privacy Rule described in (a) above.N.H. Admin. Code § He-A 504.02