When must an in dividual be given the opportunity to agree or object to the use and disclosure of their PHI?

An individual must be given the opportunity to agree or object to the use and disclosure of their Protected Health Information (PHI) when it involves sharing information for treatment, payment, or healthcare operations. They should also be able to provide consent for other uses of their PHI not covered by these categories.