28 TAC § 22.60. Responsibility for Disclosure to Third Parties

A covered entity that discloses protected health information to another person to perform any function on behalf of the covered entity shall not make any such disclosure unless the third party agrees not to disclose or use the protected health information other than to carry out the purposes for which the covered entity disclosed the information or in a manner otherwise consistent with this subchapter.