when HIPAA requires authorization to disclose information the authorization must

a.include core elements specified by HIPAA

my answer is a

What are the other choices?