When HIPAA requires authorization elements to disclose information, the authorization must a) include core by HIPAA. b ) conforms to releases customarily used in that state . conforming to the releases customarily used by that particular health care provider . d ) include all identifying information .