Permitted Uses, Disclosures & the Minimum Necessary StandardHIPAA permits specific uses and disclosures of PHI without patient authorization