3 Confidentiality and Information Handling Online Quiz Questions

True

False

True

False

Promise that no information will ever be shared, then explain exceptions only if they occur.

Explain what is recorded, who may access it, how it may be used, and when it might be shared without permission.

Explain only who can access the information, since use and disclosure are governed entirely by law.

Wait until the client asks about privacy before describing information-handling practices.

Restrict access to authorized users.

Keep all records accessible to any staff member in case they become useful.

Secure devices and paper records.

Avoid discussing cases where others may overhear.

Verify recipients before sending private information.

Use the same storage and transfer procedure regardless of the format or sensitivity.

True

False

Check whether the disclosure serves a valid professional purpose.

Assume that any request from an organization provides sufficient authority.

Verify the applicable consent or other authority and its scope.

Share only with authorized people who have a legitimate role.

Send the entire file whenever some information could be relevant.

Use an approved, reasonably secure channel and document the decision.

Send the full file immediately because any legal request authorizes it.

Verify what rules apply, consult the designated expert as needed, and disclose only what is authorized or required.

Ignore the request because confidentiality always prohibits disclosure without client permission.

Treat a subpoena as identical to a court order and disclose all requested information.

Every disclosure between any two organizations.

Provider-to-provider disclosures for treatment.

Any disclosure requested by a school.

All disclosures made through a secure channel.

Promise that no information will ever be shared, then explain exceptions only if they arise.

Explain what is recorded, who may access it, how it may be used, and when it could be shared without permission.

Describe only the information the professional expects to share during the first meeting.

Wait until a disclosure is requested before discussing confidentiality.

Send the complete file because the school has requested it for a professional purpose.

Refuse all requests from schools, even when the client has authorized a disclosure.

Check the authorization and applicable rules, clarify what the school needs, and share only authorized, relevant information through an approved channel.

Send the file first, then ask a supervisor whether the disclosure was appropriate.

Verify what legal authority applies and disclose only information authorized or required by it.

Treat every subpoena as equivalent to a court order and provide the entire record.

Disclose nothing in response to any legal process, regardless of its terms.

Provide all requested information whenever a legal document is received.

Wait until the organization confirms that harm occurred before taking action.

Delete all records of the incident so the information cannot spread further.

Contact the recipient directly and ask them to resolve the matter without notifying anyone else.

Limit further access or sharing, notify the appropriate supervisor or privacy lead, preserve relevant facts, and follow incident procedures.

It applies to every disclosure without exception, including provider-to-provider treatment disclosures.

It generally applies to HIPAA uses and disclosures, with exceptions such as provider-to-provider disclosures for treatment.

It applies only when a client has not given consent.

It requires disclosure of a complete record whenever any part of the record is relevant.