Exam CIPP-US topic 1 question 100 discussion

While the other options listed are all exceptions to the authorization requirement, disclosing health information to pay a third-party billing administrator falls under the "payment" exception, so authorization is not required.

Yup, D...

After a lot of my own research I also go with D and agree with Ambulocetus. The key is "third party". The cwww98 logic is wrong or he/she did not understand the question.

The answer is D. Disclosing health information needed to pay a third party billing administrator. Among the options provided, disclosing health information needed to pay a third party billing administrator would NOT constitute an exception to the authorization requirement under the HIPAA Privacy Rule. Generally, when disclosing health information for payment and healthcare operations purposes, specific patient authorization is not required. However, this exception applies primarily to disclosures made to healthcare providers, health plans, and other entities directly involved in the payment or healthcare operations process.