Use inside covered components, and Disclosure to other U-M Units (crossing the "PHI Privacy Barrier")