The Privacy Rules mandate authorizations for some uses and disclosures. For example, a covered entity must obtain a written and signed authorization from the ...