Found in a standard medical release form

Actual text. Comments in parens.

HEALTH OVERSIGHT ACTIVITIES.
Our practice may disclose your PHI (personal health information) to a health oversight agency for activities authorized by law . (what’s the agency?) Oversight activities can include, for example, investigations, inspections, audits, surveys, licensure and disciplinary actions; civil, administrative, and criminal procedures or actions; or other activities necessary for the government to monitor government programs, compliance with civil rights laws and the health care system in general.

RESEARCH
Our practice may use and disclose your PHI for research purposes in certain limited circumstances. Formal review of health histories as part of a research study will only happen under the ethical guidance, requirements and approval of an Institutional Review Board. (What’s the institution and who sets the ethical guidelines?)

NATIONAL SECURITY
Our practice may disclose your PHI to federal officials for intelligence and national security activities authorized by law. We also may disclose your PHI to federal officials in order to protect the President, other officials or foreign heads of state or to conduct investigations.