Minimum necessary disclosure: Unless a disclosure is required by law or authorized by the individual, a health care provider or other covered entity is required to make reasonable efforts to limit protected health information to the minimum necessary to accomplish the intended purpose of the use, disclosure or request.