Is there a signed authorization permitting the disclosure?
Yes, there is a signed authorization from the individual!
- The covered entity must obtain individual authorization, unless the disclosure is otherwise permitted by another provision of the Privacy Rule
- Authorization must meet all requirements in the Privacy Rule to be valid
- Minimum necessary does not apply
