Under HIPAA, a covered entity may disclose a patient's protected health information (PHI) without written authorization for which of the following purposes?
-
A
Marketing campaigns by a pharmaceutical company partner
-
B
Public health activities authorized by law, such as disease surveillance
-
C
Sharing records with the patient's employer upon the employer's request
-
D
Providing information to a patient's adult child without patient consent