in which of the following circumstances must an individual be given the opportunity to agree or object to the use and disclosure of their phi?
When Must the Individual be Given the Opportunity to Agree or to Object?
A covered entity may use or disclose protected health information, provided that the individual is informed in advance of the use or disclosure and has the opportunity to agree to or prohibit or restrict the use or disclosure. The covered entity may orally inform the individual of and obtain the individuals oral agreement or objection to a use or disclosure permitted as discussed below.
Use and Disclosure for Facility Directories: See subsection (a) of §164.510.