which of the following statements is true of HIPAA rules regarding the release of PHI by covered in trees and business associates? A. cover in trees must require adequate assurances in writing that business associates will adequately safeguard PHI. B. covered in trees are responsible for the use of PHI made by business associates. C. covered in trees aren't allowed to release PHI (identifiable or de-identified) to business associates. D. once a covered entity releases information to a business associate the associate may disclose that information to the entities.