Select the FALSE statement regarding the responsibilities of providers with direct treatment relationships under HIPAA’s privacy rule.

A: Provide the individual with a Notice of Privacy Practices that describes the use of PHI. B: Obtain a written authorization for each and every TPO event. C: Obtain a written authorization for any disclosure or use of PHI other than for the purposes of TPO. D: Provide access to the PHI that it maintains to the individual and make reasonable efforts to correct possible errors when requested by the individual. E: Establish procedures to receive complaints relating to the handling of PHI.