When should HIPAA be broken?

• A. Never
• B. If it could harm the public, epidemic, child abuse, or emergency
• C. If the patient requests it
• D. When it's convenient

Answer: (B)

HIPAA allows certain disclosures without patient consent when there is a real risk to public health or safety. In urgent situations—like preventing the spread of an epidemic, reporting suspected child abuse, or responding to an emergency—health professionals can share the minimum necessary information with the appropriate authorities or responders to prevent harm. This is why the option describing those kinds of circumstances is the correct choice. Disclosing information merely for convenience or simply because a patient requests it isn’t allowed unless a specific exception or authorization applies. The safeguards and limits are there to protect patient privacy while still enabling necessary public health and safety actions.