the Privacy Rule will be made only with the written authorization of an individual.1 The Final Rule expands the requirements to include provisions designed to afford individuals with a better understanding of (i) a patient???s right to restrict disclosures; (ii) the types of uses and disclosures that require individual authorization; (iii) a patient???s right to opt out of certain disclosures;2 (