Clinic staff are responsible for obtaining a patient's signed authorization for using the patient's information in connection with the clinic's payment activities. true or false