what's the correct answer

Question 3 A covered entity may use or disclose PHI without an authorization, or documentation of a waiver or an alteration of authorization, for all of the following EXCEPT: 6 Use of decedents' information, with certain representations by the researcher. 6 Data that does not cross state lines when disclosed by the covered entity. i Limited data set with an approved data use agreement. i Activities preparatory to research, with certain representations by the researcher