A set of members of a health plan have authorized the health plan to use specific parts of their PHI in a marketing campaign. Which of the following is true about this activity by the health plan? A. The health plan must only use the minimum necessary information
B. The health plan needs to keep the authorizations on file for 60 days
C. The health plan can use that PHI for other purposes
D. The health plan could receive verbal authorization for this use