Which steps ensure patient identity and privacy before sharing health information?

• A. Share information freely to any caller.
• B. Share information via insecure channels.
• C. Verify patient by at least two identifiers (name and date of birth), confirm the information is being asked by an authorized person, and only share information via secure channels.
• D. Share information via secure channels only after obtaining express authorization.

Answer: (C)

Protecting patient information hinges on confirming who is requesting data and making sure disclosures happen through safe means. The best practice is to verify identity with at least two identifiers, such as name and date of birth, to avoid mixing up records. Then confirm the person asking is authorized to receive the information, ensuring you’re sharing only with someone who has a legitimate need. Finally, share the information only through secure channels to protect it from interception or tampering during transmission. Together, these steps help maintain privacy and comply with patient-protection rules.

Disclosing information freely to any caller bypasses privacy safeguards; using insecure channels creates exposure risk; and relying on authorization alone without verifying identity and current authorization may still allow improper disclosures.