What is the Minimum Necessary Standard for protected health information?

An organization should limit the use or disclosure of PHI to the minimum necessary to accomplish the intended purpose