(a) A covered entity that electronically exchanges, uses, or discloses PHI, at a minimum, must comply with the following standards for confidential information in any form, to the extent applicable:(1) HIPAA Privacy, Security and Breach Notification Regulations;(2) the Texas Medical Records Privacy Act, Chapter 181 of the Texas Health and Safety Code;(3) the Texas Identity Theft Act, Chapter 521 of the Texas Business and Commerce Code; and(4) any other applicable state or federal law or regulation that requires that confidential information be safeguarded, used, or disclosed only for authorized purposes by authorized users, including without limitation:(A) requirements applicable to the following specific types of data:(i) Cancer: Texas Health and Safety Code §82.008 and §82.009;