Under HIPAA, how may patient access rights interact with family disclosures?

• A. The patient must consent to all disclosures to family members, with no exceptions.
• B. The patient can request or restrict disclosures to family members; if present and capable, privacy rules require consent for sharing with family; absent consent, disclosures should be limited.
• C. Family members have automatic access to patient records unless the patient objects in writing.
• D. Disclosures to family are always allowed with no patient input.

Answer: (B)