Select the correct statement from the given options.
1) If a healthcare provider obtains your computer's IP address and your social media account password, they are authorized to access your PHI.
2) When a social security number is combined with someone's health information, it becomes PHI.
3) Because anyone can see a person's vehicle license plate number simply by looking at their vehicle, it is not an identifier of PHI.
4) When associated with their health record, it is permissible to share an individual's work email address but not their personal email addresses without their authorization.