As Privacy Officer of Florida Beach Hospital, You Are Reviewing

As Privacy Officer of Florida Beach Hospital, you are reviewing the following new policy for approval and implementation. Based on the HIPAA accounting of, disclosure rules, what problem with the policy do you have?

A) You do not have to track release to employers because it is exempted from legislation.
B) You do not have to track release to attorneys because it is exempted from legislation.
C) You do not have to track release to patients because it is exempted from legislation.
D) You do not have to track release to external researchers because it is exempted from legislation.