When HIPAA requires auhtorization to disclose information the authorization must

What are your choices?