Which statement best reflects confidentiality of medical and identity information?

• A. Abide by all relevant laws and regulations related to confidentiality of medical and identity information including HIPAA
• B. Disclose all information to any third party upon request
• C. Never disclose to client
• D. Only share information with family members

Answer: (B)

Confidentiality of medical and identity information is protected by law, so the best approach is to abide by all relevant laws and regulations, including HIPAA. HIPAA sets strict rules about how protected health information can be used and shared, requiring patient authorization for most disclosures and allowing disclosures only when legally permitted or necessary for care, payment, or health care operations. It also enforces the minimum necessary standard and grants patients rights to access and control their own records.

Disclosing information to a third party simply because they request it would violate these protections unless there is a lawful basis or patient consent. Patients generally have the right to access their records, so never disclosing to the client isn’t correct. Sharing information with family members isn’t automatic either; it typically requires patient consent or a specific legal exception.