Which statement about ROI is true?

• A. It is optional for sharing
• B. It requires client consent and is limited by law
• C. It allows sharing with anyone without restrictions
• D. It is not applicable in Medi-Cal settings

Answer: (B)

Release of Information (ROI) is the process that governs how a client’s protected health information can be shared. The statement that ROI requires client consent and is limited by law is the right one because, in Medi-Cal and most healthcare settings, you generally may not disclose someone’s health information without their explicit written permission. The consent should specify who will receive the information, what information will be disclosed, and for what purpose, and you should share only the minimum amount necessary.

Laws at both the federal level (like HIPAA) and California’s privacy and confidentiality rules set these requirements and limits. There are exceptions where information can be shared without consent, such as safety emergencies or mandated reporting, but outside those exceptions, you must have consent. The client also has the right to revoke consent later.

The other statements don’t fit because ROI isn’t optional for sharing, it isn’t a free-for-all to share with anyone, and ROI is clearly applicable in Medi-Cal settings.