With respect to permissions for uses and disclosures, HIPAA divides health information into three categories. The information related to "treatment, payment and health care operations" is under consent. HIPAA provides a foundation of protection of personal health records of people. Generally, it prohibits a covered entity from disclosing a protected health record unless he is granted an authorization by the patient.