11. You are permitted to use or disclose PHI
For treatment, payment, and healthcare operations.
• With authorization or agreement from the individual patient,
• For disclosure to the individual patient.
• For incidental uses such as physicians talking to patients in a semi-private room.