The Privacy Rule lists the following 12 categories of uses and disclosures of PHI for which an authorization is not required: uses and disclosures (1) required by law; (2) for public health activities; (3) about victims of abuse, neglect, or domestic violence;(4) for health oversight activities; (5)for judicial and administrative proceedings; (6) for law enforcement purposes; (7)about decedents; (8) for cadaveric organ, eye, or tissue donation purpose; (9)for research purposes pursuant to a waiver of authorization, for reviews preparatory to research, and for research on decedent’s information; (10) to avert a serious threat to health or safety; (11) for specialized government function, including national security and intelligence activities; and (12) for workers’ compensation.