The Health Insurance Portability and Accountability Act (HIPAA) has codified the responsibility of health care providers who electronically transmit health and related information. In which of the following cases must a patient sign specific authorization for a physician to share their health care information?