Which of these is a HIPAA “disclosure” that must be logged?

The Notice of Privacy Practices educates patients on:

HIPAA’s definition of “health care operations” includes conducting training programs in which students, trainees, or practitioners in healthcare learn under supervision to practice or improve their skills as healthcare providers

Healthcare activities that allow access to a patient’s health record without direct consent from the patient include:

An Authorization for Use or Disclosure Form must:

You overhear a staff member leave a voice message for patient John Smith asking him to contact the center regarding his scheduled biopsy for the next day. Was this a privacy breach?

The HIPAA/HITECH (Privacy Rule) requires you:

HIPAA/HITECH applies only to Electronic Medical Records.

If a patient in an outpatient clinic requires urgent transport to an Emergency Room, per HIPAA/HITECH you:

If a patient with insurance pays cash for a specific office visit or procedure and does not want their insurance company billed, what is required of the healthcare provider?