Under HIPAA, a CTRS may share a client's protected health information (PHI) with another member of the interdisciplinary care team without specific written authorization when: