Under HIPAA, which of the following is considered a legitimate reason for an OT to disclose a client's protected health information (PHI) without written authorization?
-
A
Sharing records with the client's employer upon request
-
B
Disclosing information to a family member who pays the bill
-
C
Reporting a communicable disease to public health authorities as required by law
-
D
Providing records to a research team studying OT outcomes