Under HIPAA's Minimum Necessary Standard, a covered entity sharing PHI must disclose:
-
A
The entire medical record to ensure completeness
-
B
Only the information reasonably needed to accomplish the intended purpose
-
C
All information the requesting party asks for
-
D
PHI only after obtaining written authorization regardless of purpose