O.C.G.A. § 31-2A-38

Confidentiality of all data, files, and records of clients related to the services provided under this article shall be maintained by the department, contract management agency, and direct client service providers pursuant to federal and state laws related to privacy of medical records, including requirements under the federal Health Insurance Portability and Accountability Act of 1996, P.L. 104-191.