True or false: as a patient, your doctor must have you sign a hipaa consent and release form to share your ephi or phi with insurance providers who pay your medical bills. this is part of the hipaa privacy rule.