Describe key HIPAA/privacy considerations when sharing information with partner agencies.

• A. Disclose the full medical and behavioral history whenever requested.
• B. Limit disclosure to the minimum necessary, obtain valid authorization, ensure secure transmission, document releases, and respect state/federal privacy laws.
• C. Privacy rules do not apply to partner agencies.
• D. Always share without consent to expedite services.

Answer: (B)

When sharing information with partner agencies, the key is protecting privacy while enabling appropriate care. Disclosures should be limited to the minimum amount of information necessary for the purpose, and a valid authorization is typically required before sharing identifiable data. Use secure methods to transmit information, and keep careful records of what was released, to whom, when, and for what purpose. You must also follow applicable state and federal privacy laws, which may add protections or restrictions beyond HIPAA.

This means you shouldn’t hand over a full medical and behavioral history just because it’s requested, because HIPAA emphasizes minimum necessary disclosures. Privacy rules do apply to partner agencies, so assuming they don’t would miss important protections. And sharing information without consent, even to speed up services, isn’t appropriate under HIPAA unless a specific exception applies.