A patient's authorization for disclosure of patient history information must include the purpose of the disclosure and what information is to be released if the patient health information relates to it