 2.07. RVTs protect the sea of their clients. RVTs only use relevant identifying information in the job-related communities, consultation, emails, reports. Confidentiality and privacy requirements may be established by law or by an organization's policies. We follow HIPAA because they win on a federal level. So it's like cute whatever we want to do. The bottom line is they win. So we have to follow their rules straight up. There's also state-by-state laws that your BCBA should be aware of, and they will instruct how you communicate with clients as part of that federal and state blend. So be aware that you need to be following this as part of the 2.07 code, but it's going to vary a little bit depending on your setting and your state.