Disclosure is allowed only with designated staff following policy.

• A. Disclosure is never allowed
• B. Disclosure is allowed to friends
• C. Disclosure is allowed only with designated staff following policy
• D. Disclosure should be made publicly

Answer: (C)

Sharing confidential information is tightly controlled to protect the person’s privacy. Information should only be disclosed to people who are designated by policy and who have a legitimate need to know to provide care, coordinate services, or ensure safety. When disclosure happens, it must follow the agency’s procedures and be limited to the minimum amount necessary. That’s why the statement that disclosure is allowed only with designated staff following policy is correct: it keeps information within the care team and within approved guidelines.

Disclosing to friends isn’t allowed because they aren’t part of the designated staff with a legitimate need to know, so that would violate privacy protections. Disclosing publicly would expose sensitive information to anyone and breach confidentiality. There are exceptions (such as consent or mandated reporting), but even then disclosures follow policy and go to appropriate, designated recipients, not to arbitrary others.