Which scenario is authorization for PHI sharing?

• A. Sharing PHI with another provider for ongoing treatment within the same facility.
• B. Consent is only required when PHI is shared with family members, not providers.
• C. Sharing PHI with another provider for routine treatment does not require explicit consent.
• D. Sharing PHI with another provider should be authorized by the patient.

Answer: (D)

Protecting patient information means some disclosures happen as part of care, while others require explicit permission. Sharing PHI with another provider for ongoing treatment within the same facility is generally allowed as part of the treatment process, so it doesn’t require a separate authorization. The idea that consent is only needed for family members isn’t accurate, and stating that sharing with another provider for routine treatment doesn’t need explicit consent describes a situation that already fits treatment disclosures.

The scenario that truly calls for patient authorization is when you share PHI with another provider, because doing so may fall outside the routine allowed disclosures for treatment and requires the patient’s explicit permission.