Before PHI directly relevant to a person's involvement with the individual's care or payment of health care is shared with that person?

Proper authorization or consent must be obtained from the individual. This ensures that the individual is aware of and agrees to the sharing of their personal health information (PHI) for specific purposes related to their care or payment for health services. This helps protect the privacy and confidentiality of the individual's health information.