Under HIPAA, a disability specialist must obtain written authorization before disclosing a client's protected health information (PHI) to which entity?
-
A
A treating physician directly involved in care
-
B
An employer requesting disability verification for accommodation
-
C
A state vocational rehabilitation agency with a signed ROI
-
D
A third-party life insurance company