Unless otherwise defined in this section, each term used in these rules has the meaning assigned by the Health Insurance Portability and Accountability Act (HIPAA).(1) Access--The physical or logical capability to interact with or otherwise make use of information.(2) Authorized purpose--A purpose expressly authorized by applicable law, regulation, or agreement.(3) Authorized user--A person:(A) who is authorized to process, view, handle, examine, interpret, or analyze confidential information;(B) who has a demonstrable need to know and have access to the confidential information; and(C) who has agreed in writing to be bound by the use and disclosure requirements pertaining to confidential information.(4) CFR--The Code of Federal Regulations.(5) Confidential information--Any communication or record (whether oral, written, electronically stored or transmitted, or in any other form) that consists of or includes any or all of the following information that must be protected from unauthorized use or disclosure as required by applicable state or federal law (e.g. constitutional, statutory, judicial, and legal agreement requirements):(A) information designated as confidential under the laws of the State of Texas and of the United States;(B) personally identifiable information (PII), meaning information that can be used to uniquely identify, contact, or locate a single individual or can be used with other sources to uniquely identify a single individual;(C) PII about or concerning an individual who receives government benefits under one or more public assistance programs administered or overseen by HHSC (also referred to as "client information");(D) protected health information (PHI), including without limitation electronic PHI (ePHI) or unsecured PHI, as defined by HIPAA;(E) sensitive personal information (SPI), with the meaning assigned by the Texas Identity Theft Act, Chapter 521 of the Texas Business and Commerce Code;(F) federal tax information, with the meaning assigned in the Internal Revenue Code,