Under HIPAA, which of the following is a permissible use of a practitioner's credentialing information without explicit authorization?
-
A
Sharing the practitioner's peer review findings with their personal attorney
-
B
Disclosing credentialing status to another hospital for treatment or quality improvement purposes
-
C
Providing malpractice history to a news organization investigating the practitioner
-
D
Selling credentialing records to a locum tenens staffing agency for marketing