When requesting protected health information (PHI) from external or internal sources, employee limits requests for information to reasonably necessary information required to accomplish the intended purpose; accesses the minimum necessary amount of protected health information (PHI) needed to perform job functions; limits the health information disclosed to the amount reasonably necessary for its intended purpose on all routine or recurring disclosures of protected health information (PHI). These states include: Alabama, Alaska, Arizona, Arkansas, Delaware, Florida, Georgia, Hawaii, Idaho, Iowa, Kansas, Maryland, Massachusetts, Michigan, Nebraska, Ohio, Pennsylvania, Texas, Utah, Vermont, and Washington State.