Which example describes when φ (phi) cannot be disclosed without authorization under the HIPAA Privacy Rule?
A) When the information pertains to a patient's medical history.
B) When the disclosure is required by law.
C) When the disclosure is necessary for treatment, payment, or healthcare operations.
D) When the patient gives explicit written consent.
