Pamela Is Chief Administrator in Charge of Medical Records at Sunshine

Pamela is Chief Administrator in charge of medical records at Sunshine County Hospital. She received a request for copies of Victoria's medical records from her employer and she released them without Victoria's authorization. Pamela has

A) not violated the HIPAA Privacy Rule because employers are included in the groups that can receive protected health information without an authorization.
B) violated the HIPAA Privacy Rule because employers are not included in the groups that can receive protected health information without an authorization.
C) not violated the HIPAA Privacy Rule because there is an exception in the Rule for the release of medical records by the head of the medical records department.
D) None of the choices are correct.