In CCAR practice, what governs confidentiality and disclosures?

• A. Confidentiality is unlimited and can be breached at any time.
• B. Consent, safety, and legal duties define disclosure; share information with authorized individuals for legitimate purposes.
• C. Any disclosure is allowed as long as it's to healthcare providers.
• D. Disclosures should be made for all clients’ families without consent.

Answer: (B)

Confidentiality in CCAR practice is guided by three clear factors: consent, safety, and legal duties. You only share information with people who are authorized and for purposes you have been given permission for. First, consent means the client agrees to share specific information with specific people for defined reasons, and they can often limit or revoke that permission. Second, safety considerations come into play when there’s a risk of harm to the client or other people; disclosures may be made to obtain help or prevent harm while still aiming to minimize what’s shared. Third, legal duties require certain disclosures by law, such as mandated reporting or responding to a court or regulatory request.

So, information should be shared with those who need to know and for legitimate, stated purposes. This reflects the minimum necessary principle—don’t disclose more than needed. Choices that suggest unlimited disclosure, or sharing broadly with families without consent, or restricting disclosure only to healthcare providers, don’t fit the standard.