Information Privacy and Security

Disclosure to Family and Friends

Can information be disclosed without patient consent?

Yes! The privacy rule allows organizations to disclose confidential information to family and friends who are actively involved in care without obtaining a consent or authorization.   However, it is always best to give the patient the opportunity to consent or object if the patient is able to provide the consent. Always follow the Minimum Necessary Rule and only disclose specifically what is needed by the family member to support the patient’s care. Please see:  Breach Notification:  Unauthorized Access, Use or Disclosure of Individually Identifiable Patient or Other Personal Information - OP 10-40-.05.

This page was last updated December 7, 2011 and is maintained by