- Disallowing the disclosure of information/PHI to unauthorized persons without the appropriate consent of the information/PHI owner except as permitted under applicable DHA policy and/or Federal or State law;