(a) When providing a telehealth service, a health professional shall take appropriate measures to ensure that client communications, recordings, and records are protected as required by federal and state privacy laws.(b) A health professional is responsible for ensuring all persons acting under the supervision, direction, or delegated authority of the health professional observe federal and state privacy laws when providing a telehealth service.