B. Contracted housing program administrators may not sell or otherwise share any member's personal health information, unless authorized or required by state or federal law, including the health insurance portability and accountability act privacy standards (45 Code of Federal Regulations part 160 and part 164, subpart E).