(a) A covered entity may deliver to a consumer or customer a request for authorization and an authorization form only if the request and form are clear and conspicuous.
(b) A covered entity is required to include delivery of the authorization form in a notice to a consumer or customer only if the covered entity intends to disclose health information protected under this chapter.