the privacy rule allows for a patient to request that no information be shared with others even to the point of not acknowledging the patient's presence in the covered entity. true or false