. "Authorizations are required for the use and disclosure of Protected Health Information (PHI) for purposes other than the permitted uses and disclosures specified in the Privacy Rule." . . . . .