A Doctor Is Sending a Patient's Lab Work to a Lab

A doctor is sending a patient's lab work to a lab That is an external business partner. The lab and the doctor's staff are all trained on the doctor's Privacy Practices. The doctor has a signed Notice from the patient. In order to use or disclose PHI, the lab MUST:

A) Request that the patient sign the lab's Notice of Privacy Practices.
B) Do nothing more - the activity is covered by the doctor's Notice of Privacy Practices.
C) Obtain a specific authorization from the patient.
D) Obtain a specific authorization from the doctor.
E) Verify that the doctor's Notice of Privacy Practices has not expired.