State and local social services agencies that administer the Medicaid program must provide safeguards that restrict the use or disclosure of information concerning applicants and recipients (including names and addresses of recipients, medical services provided, medical data, social and economic data, etc.) to purposes directly connected with the Medicaid program (establishing eligibility, determining amount of medical assistance, providing services to recipients, conducting investigations or civil or criminal proceedings related to administration of the program).