[Verified Answer]: Which of the following statements is true…

Which of the following statements is true regarding the use and disclosure of protected health information (PHI) for research purposes? A covered entity must always obtain authorization for the use and disclosure of PHI for research purposes. Covered entities may use and disclose PHI in the format of a limited data set for research purposes. If the PHI comes from a hospital, patient authorization is not necessary to use and disclose PHI for research purposes. A covered entity can always share PHI without authorization for research purposes.