Employees in the hospital business office may have legitimate access to patient health information without patient authorization based on what HIPAA standard or principle?a$.$ Minimum necessaryb. Compound authorizationc. Accounting of disclosuresd. Preemption