Subsection (2)(d) applies to covered entities, as defined in HIPAA as...
A) Hospitals and clinics
B) Private practices
C) Government agencies
D) Insurance companies