When can PHI be disclosed in response to a subpoena?

The correct response indicates that protected health information (PHI) can be disclosed in response to a subpoena when there is a written authorization. This authorization acts as a legal document that provides explicit consent from the patient for their PHI to be released. It is crucial for organizations to adhere to HIPAA regulations, which generally require that any disclosure of PHI without patient consent must align with the laws and guidelines set forth. A written authorization ensures that the patient is fully informed and has agreed to the specifics of what information can be shared and with whom.

The other options do not meet the stringent requirements set by HIPAA for the disclosure of PHI. A government license alone does not authorize the release of protected information, as it typically pertains to regulatory compliance rather than consent for information sharing. Verbal consent can be ambiguous and difficult to validate, making it inadequate for such disclosures. Similarly, a subpoena issued by a police officer does not automatically grant access to PHI unless it is accompanied by appropriate legal documentation and, in some cases, written authorization. Thus, written authorization serves as the safest and most compliant method for disclosing PHI in response to a subpoena.