A hospital shares a patient's PHI with a collection agency to recover an unpaid bill. Under HIPAA, this is considered:
-
A
A violation because financial matters are not a permitted use of PHI
-
B
A permitted disclosure for payment purposes under HIPAA
-
C
A permitted disclosure only if the patient signed a specific authorization
-
D
A violation unless the collection agency is a covered entity