Which statement about patient confidentiality is true?

• A. It can be shared with the public without consent
• B. It should be held in confidence and shared only with appropriate team members
• C. It should never be shared under any circumstance
• D. It should be sold for research purposes without consent

Answer: (B)

Protecting a patient’s private health information and sharing it only with people who need to know for the patient’s care is the core idea here. Confidentiality means information stays within the circle of the care team involved in that patient’s treatment, and any broader disclosure requires the patient’s consent or falls under specific legal exceptions.

This is why the best statement is that patient information should be kept in confidence and shared only with appropriate team members who are involved in the patient’s care. In everyday practice, that includes doctors, PAs, nurses, therapists, and others who contribute to treatment and coordination. If information needs to go beyond the core team—such as to someone outside the care team or to use data for research—the patient’s consent is typically required, or the data must be de-identified and handled under proper ethical oversight.

There are lawful reasons to disclose information beyond the immediate team, such as reporting certain safety concerns or public health requirements, but these are exceptions rather than the rule. Conversely, sharing information with the public or selling identifiable data without consent violates confidentiality and is not appropriate.