When can a request for the release of a medical record of information bypass a signed patient authorization or consent?

Under HIPAA's Privacy Rule, a patient's consent is not required for:

• Usage or disclosure for treatment, payment or health care operations (TPO)
• Disclosure for marketing purposes
• Disclosure to business associates
• Court orders