The Privacy Rule protects all "individually identifiable health information" held or transmitted by a covered entity or its business associate, in any form or media, whether electronic, paper, or oral. The Privacy Rule calls this information "protected health information (PHI)."
The answer to your answer is B because who cares what your freinds think,from a personal experience I shouldn't but I do,but still I shouldn't and neither should you or anyone else for that matter.
