The Final Privacy Rule requires a covered entity to obtain an individual's prior written authorization...

Situations where the marketing is for a drug or treatment could improve the health of that individual.

Situations where the patient has already signed the covered entity's Notice of Privacy Practices.

A face-to-face encounter with the sales person of a company that provides drug samples

A communication involving a promotional gift of nominal value.

The situation where the patient has signed the Notice of Privacy Practices of the marketer.