A cardiac technologist is approached by a pharmaceutical sales representative requesting access to de-identified patient imaging data for a company study. The technologist should:
-
A
Provide data since it is de-identified and poses no HIPAA risk
-
B
Decline and direct the representative to the institution's research compliance office
-
C
Share only aggregate statistics to minimize risk
-
D
Ask the department manager informally before providing data