A hospital is conducting research and needs access to patient records. Under HIPAA, what is a required condition for research-related disclosure of

The hospital must obtain explicit HIPAA Authorization from the patients.

The hospital can share PHI with internal researchers without restrictions.

The hospital can disclose PHI without patient consent for research purposes.

The hospital can use PHI for research as long as it is anonymized.