The Final Privacy Rule Requires a Covered Entity to Obtain

The Final Privacy Rule requires a covered entity to obtain an individual's prior written authorization to use his or her PHI for marketing purposes except for:

A) Situations where the marketing is for a drug or treatment could improve the health of that individual.
B) Situations where the patient has already signed the covered entity's Notice of Privacy Practices.
C) A face-to-face encounter with the sales person of a company that provides drug samples.
D) A communication involving a promotional gift of nominal value.
E) The situation where the patient has signed the Notice of Privacy Practices of the marketer.