Under HIPAA's Minimum Necessary Standard, which practice is MOST appropriate when a health plan requests patient records?
-
A
Provide only the specific information needed for the stated purpose
-
B
Send the complete medical record to avoid omissions
-
C
Require written consent for every single request
-
D
Deny all requests unless a subpoena is presented