Under HIPAA Regulations, a Covered Entity Such as a Hospital

Under HIPAA regulations, a covered entity such as a hospital can disclose individually identifiable health information from its records if the patient signs an authorization granting access. What does this include?

A) Who will receive the information
B) Why they need the information
C) The Social Security number of the patient
D) If the data is not specifically obtained for the research