Under the Health Insurance Portability and Accountability Act (HIPAA), a covered entity may disclose PHI without patient authorization for which purpose?
-
A
Marketing a new pharmaceutical product
-
B
Public health activities such as disease surveillance
-
C
Employment background checks requested by the patient's employer
-
D
Research conducted by a for-profit company without IRB oversight