This tutorial about treatment, payment healthcare operations (TPO) disclosures is the eleventh of 24 lessons. The Privacy Rule permits covered entities to use and disclose TPO without obtaining the patient's consent. TPO activities (TPO). Such activities are defined at § 164.501. This website is specifically designed for small entities in California. Each tutorial is narrated by Carol Mack, RN, attorney at law.