Pursuant to the Rule, a covered entity may disclose protected health information without authorization from the individual to ???[a] public health authority that is authorized by law to collect or receive such information for the purpose of preventing or controlling disease, injury, or disability, including, but not limited to, the reporting of disease, injury, vital events such as birth or death,