A contractor must have a written general confidentiality policy that:(1) demonstrates that services will be delivered in a manner that ensures program participant confidentiality regarding records and information if the special nonresidential project provides direct services;(2) includes a statement about the importance of confidentiality in maintaining the safety of:(A) victims;(B) victims' families;(C) volunteers;(D) employees; and(E) others related to the program;(3) indicates the parameters of what must be held confidential and by whom, including internal communications to staff regarding clients; and(4) the limits of confidentiality under the law.