Regarding disclosure of personal health information (PHI), as of Feb. 18, health care providers, health care plans and other entities are required to honor patient requests to restrict disclosure of their PHI if such disclosure is for purposes unrelated to treatment (e.g., payment or health care operations) and if the PHI in question involves a health care service for which the patient has paid th