55 Pa. Code § 5230.17
A PRS agency shall protect information about an individual in compliance with the Mental Health Procedures Act (50 P.S. § § 7101—7503), § § 5100.31—5100.39 (relating to confidentiality of mental health records), the Health Insurance Portability and Accountability Act of 1996 (Pub.L. No. 104-191, 110 Stat. 1936) and 4 Pa. Code § 255.5 (relating to projects and coordinating bodies: disclosure of client-oriented information).