Does the fact that a facility reports personally identifiable information about a patient through the required reporting process need to be included in the notice of privacy practices? 0 Not if the purpose is for preventing or controlling disease, injury, or disability, including, but not limited to, the reporting of disease, injury, vital events such as birth or death, and the conduct of public health surveillance, public health investigations, and public health interventions; or, at the direction of a public health authority, to an official of a foreign government agency that is acting in collaboration with a public health authority