When required, the information provided to the data subject in a HIPAA disclosure accounting ...
must be more detailed for disclosures that involve fewer than 50 subject records.