42 C.F.R. § 493.1231
The laboratory must ensure confidentiality of patient information throughout all phases of the total testing process that are under the laboratory's control.