The Person in Charge of Medical Records for a Physician's

The person in charge of medical records for a physician's office is preparing to release medical records requested by an insurance company. Which of the following is a recommended guideline for this procedure?

A) Release the entire record, not just the information requested.
B) Include the patient's name, address, and date of birth on the authorization.
C) Warn the patient that once authorization is given, it cannot be rescinded.
D) Receive a verbal authorization from the patient prior to release of the record.
E) Receive specific approval from the patient, even with a general authorization on file.