Sally is seeing her new primary care provider for the first time.

Sally is seeing her new primary care provider for the first time. When she signs in, she is asked to sign papers for the release of medical records, including her laboratory results. According to the Health Insurance Portability and Accountability Act (HIPAA), she must authorize release of records before _______________would be permitted to receive and review her records.