What is required when information is requested from a third party?

• A. Obtain consent or legal authority to share information; ensure privacy and data protection
• B. Share without consent
• C. Rely on assumptions
• D. Delay indefinitely

Answer: (A)

When information is requested from a third party, you must have a lawful basis to disclose and protect the privacy of the individuals involved. This means obtaining consent from the person concerned or relying on a legal authority that permits the disclosure, such as a statutory requirement, court order, or other formal authorization. With that authority in place, share only what is necessary to meet the purpose of the request and verify the requester’s legitimacy to prevent improper access. This approach upholds privacy and data protection requirements and minimizes risk to individuals. Sharing without consent, making assumptions, or delaying indefinitely would breach these duties and create potential legal and ethical problems.