"The proposed rule would allow health providers, health plans and other covered entities to use or disclose PHI without individual authorization to carry out treatment, payment or health care operations." . . . .