Furthermore, clarified that when making disclosures under this exception, a covered entity should
obtain verbal permission from the patient when possible, or otherwise be able to reasonably determine that the patient does not object, prior to disclosing the patient's PHI.