Which of the following PHI disclosures are permitted under the HIPAA Privacy Rule for workers' compensation purposes?
1) Disclosing the PHI to the employer without the individual's authorization
2) Disclosing the PHI to the employer with the individual's authorization
3) Disclosing the PHI to the employer for treatment purposes
4) Disclosing the PHI to the employer for payment purposes
