A covered entity may use or disclose PHI in facility directories and to family, friends or others involved in the individual's care, or for disaster relief notification, only after giving the individual the opportunity to agree, object or, if incapacitated, applying professional judgment in the individual's best interest, per 164.510.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.