Employees may not share or disclose any private health information (phi) with anyone not directly involved in the care of the patient. this includes: