Patients are permitted to request a log of disclosure of their PHI, which must include the date, name and address of the entity/person who received the IIHI, a description of the IIHI disclosed, an explanation of the purpose or a copy of the patient's written authorization, and a copy of a written request for disclosure