Which element is required in a GDPR-compliant privacy notice but is NOT typically required under the original U.S. HIPAA Privacy Rule's Notice of Privacy Practices?
-
A
Description of how data may be used and disclosed
-
B
Lawful basis for each processing activity
-
C
Contact information for the privacy officer
-
D
Individual's right to access their health information