Under HIPAA's Minimum Necessary Standard, when a staff member requests access to a patient's entire medical record for billing purposes, the appropriate response is to:
-
A
Provide the full record as requested
-
B
Provide only the information reasonably necessary to complete the billing task
-
C
Deny all access until a formal request is submitted
-
D
Require written authorization from the patient before any disclosure