Your HIS Department Receives an Authorization for Sara May's Medical

Your HIS Department receives an authorization for Sara May's medical history to be sent to her attorney, but the expiration date noted on the authorization has passed. What action is appropriate according to HIPAA privacy rules?

A) Do not honor because the authorization is invalid.
B) Contact the patient to get permission to respond.
C) Contact the attending physician for permission to respond.
D) Honor the authorization since the patient obviously approves of the release.