An insurance company requests verification of a patient’s bi…

An insurance company requests verification of a patient’s birth date and complete name. A copy of the patient’s entire record is sent to the company, including a health history that indicates evidence of human immunodeficiency virus (HIV). This action may be considered which of the following?