Description should include that the covered entity is permitted, but not required, to use and disclose PHI without an individual’s authorization for the following circumstances:

Process/Skill Questions: