Is the following true or false?

True-the privacy rule allows covered entities to disclose phi to public health authorities when required by federal, tribal, state, or local laws [45 cfr 164.512(a)]. this includes state laws (or state procedures established under such law) that allow agencies to receive reports of disease, injury, child abuse, birth and death. other information which may be needed for conducting public health surveillance, investigation or intervention purposes is allowed if state laws require a practice to provide the information upon request by a specific agency. for disclosures not required by law, covered entities may still disclose, without authorization, to a public health authority authorized by law to collect or receive the information for the purpose of preventing or controlling disease, injury, or disability, the minimum necessary information to accomplish the intended public health purpose of the disclosure [45 cfr 164.512 (b)]. for disclosures to a public health authority, covered entities may rely on a minimum necessary determination made by the public health authority in requesting the protected health information.