(a) granting an individual access to a record of his or her personal health information if the individual makes an oral request for access or makes no request, provided that access is authorized under this Part, and

(b) communicating with the individual about the collection, use or disclosure of the individual’s personal health information.