When releasing information to another provider, what must be included in the release?

• A. Verbal authorization is sufficient for disclosures.
• B. A general consent that does not specify data or purpose.
• C. A request from the receiving provider is enough.
• D. A signed release of information that specifies what data may be disclosed and for what purpose, consistent with privacy laws.

Answer: (D)

The essential idea is that sharing information between providers must be governed by a formal, written authorization. A release that is signed by the person or their authorized representative is required, and it must spell out exactly what data can be disclosed and for what purpose. This specificity protects confidentiality by limiting the disclosure to only what is necessary and for the stated reason, and it ties the sharing to privacy rules. Verbal permission or a vague general consent doesn’t meet the protection standards because they don’t define the exact data or purpose and can create ambiguity about scope. The release also needs to align with privacy laws, and it should cover who is involved, how long the information can be shared, and how the person can revoke the authorization.