Answer to Question 1
D
Answer to Question 2
Consent here refers to HIPAA consent, which is inferred from the patient receiving a copy of the Privacy Policy and allows the provider to share PHI for treatment of the patient, obtaining payment for the visit and operation of the medical practice or facility (for example staffing and scheduling). Authorization is not automatic and requires a form signed by patients or their representatives for each type of disclosure.