Before the Omnibus Rule was introduced, which of these was not possible?

a) To give patients a copy of their health records.
b) To use PHI for marketing purposes without an authorization.
c) Issue fines to business associates for HIPAA violations.
d) All of the above.