Under HIPAA, which statement best reflects the standard for disclosures?

Under HIPAA, which statement best reflects the standard for disclosures?

• A. Disclosures must be avoided entirely.
• B. PHI can be disclosed to marketing firms without authorization.
• C. The right to access and amend records is protected; the minimum necessary standard guides disclosures.
• D. All disclosures require patient consent in every case.

Answer: (C)