The release, transfer, provision of access to, or divulging in any other manner of protected health information outside of the entity holding the information.