A patient asks you to share their medical information with a family member. What is the proper response?

• A. Post PHI on board.
• B. Share PHI with family.
• C. Do not disclose PHI without patient consent or proper authorization, unless allowed by law; verify consent in writing if needed.
• D. Share PHI with a friend.

Answer: (C)

Protecting patient privacy means health information is confidential and can only be shared with someone the patient has authorized or when law allows. When a patient asks you to share their medical information with a family member, you should not disclose PHI unless the patient has clearly granted permission or there is a legal allowance. If consent is given, obtain it in writing when required and share only the minimum information necessary, specifying who can receive it and what can be shared. In practice, you would clarify exactly who may receive what information, document the patient’s preferences, and follow facility policy on written authorization. If the patient cannot consent, you follow the applicable laws and policies to determine who may access the information. Choices that involve posting publicly or sharing with friends or family without consent would violate confidentiality and are not appropriate.