Under HIPAA's Minimum Necessary Standard, when a nurse practitioner's office receives a request for a patient's complete medical record from the patient's attorney for a personal injury lawsuit, what is the most appropriate response?
-
A
Release the entire chart immediately as requested
-
B
Request a valid HIPAA authorization from the patient before releasing records
-
C
Deny the request because attorneys are not covered entities
-
D
Release only the billing records without clinical notes