The following federal statutes or regulations or state statutes and administrative rules make personal information maintained by the board confidential and identify the confidential personal information within the scope of rules promulgated by the board in accordance with section 1347.15 of the Revised Code:
(A) Social security numbers: 5 U.S.C. 552a . , unless the individual was told that the number would be disclosed.
(C) Medical records: health insurance portability and accountability act, 11 45, CFR 160, 42 USC 1320 .