All information as to personal facts and circumstances obtained by the project staff about individuals receiving services must be held confidential and not be disclosed without the individual's documented consent, except as may be necessary to provide services to the patient or as required by law, with appropriate safeguards for confidentiality; concern with respect to the confidentiality of information, however, may not be used as a rationale for noncompliance with laws requiring notification or reporting of child abuse, child molestation, sexual abuse, rape, incest, intimate partner violence, human trafficking, or similar reporting laws. Otherwise, information may be disclosed only in summary, statistical, or other form which does not identify particular individuals.

[84 FR 7788, Mar. 4, 2019]