For which of the following types of PHI does HIPAA require a signed authorization for use or disclosure?
a. Demographic information (e.g., name, address)
b. Treatment information (e.g., diagnosis, medications)
c. Payment information (e.g., billing records, insurance information)
d. De-identified health information (health information with all personally identifiable information removed)