Under HIPAA, when can PHI be disclosed to law enforcement without patient authorization?

Under HIPAA, when can PHI be disclosed to law enforcement without patient authorization?

• A. When required by law, to respond to public safety needs, to prevent harm, or for certain law enforcement activities, with disclosures limited to the minimum necessary and per applicable law.
• B. Only with patient consent.
• C. For routine internal audits regardless of legal requirements.
• D. If the patient is a suspect in a crime.

Answer: (A)