Permission granted by the patient or
the patient's representative to use or
disclose protected health information
for purposes of treatment, payment,
or health care operations