Select the correct statement regarding the requirements for oral communication in the HIPAA regulations.

Covered entities must reasonably safeguard PHI, including oral communications, from any intentional or unintentional use or disclosure that is in violation of the Privacy Rule.

Covered entities must have in place appropriate administrative, technical, and physical safeguards to protect the privacy of de-Identified data.

Covered entities are prohibited from marketing through oral communications

The Privacy Rule requires covered entities to document any information, including oral communications, which is used or disclosed for TPO purposes.

The Privacy Rule will often require major structural changes, such as soundproof rooms and encryption of telephone systems, to provide the "reasonable safeguards" of oral communications required by the regulations