Language at issue "Consumer-directed exchange occurs when a consumer or an individual authorized by a Payer to access another person's information, invokes their HIPAA Individual Right of Access (45 CFR 164.524)  and requests their digital health information from a HIPAA covered entity (CE) via an application or other third-party data steward."

Comment: An individual authorized by a Payer or by the consumer? This is confusing as written.