Answer: - Use or disclosure required by state or federal law- Use or disclosure to report child abuse/neglect- Use or disclosure in response to court orders or subpeonas- Use or disclosure to worker's compensation insurers- Use or disclosure to prevent an imminent threat of harm to the patient or others- Use of disclosure to "Business Associates"- Communication about the optometrist's own health care products and services are not considered marketing even if they use or disclose individually identifiable health information- Optometrists will not violate HIPAA because of incidental disclosures of PHI as long as reasonable precautions are in place to avoid the incidental disclosure AND the optometrist complies with the minimum necessary rule