lA privacy authorization says: “It’s OK for you to look at my PHI and disclose it to a designated third party.” lA consent form says: “I agree to participate in your research project and I understand the risks, benefits etc.