A patient in an addiction treatment program requests that their employer not be informed of their diagnosis.Which federal regulation primarily protects this confidentiality?