https://themosti.com/post/an-authorization-is-required-for-which-of-the-following-hipaa