Does anyone use a special authorization to share information with friends or family? This would seem to create confusion since this a permitted disclosure when deemed reasonable to do so by caregivers. If such an authorization is required, then that would infer that we couldn't share information without having a signed authorization. My thoughts are that such a procedure could be instituted, but would be considered stricter than required, and could result in noncompliance with policy.
Are others doing this, and if so, would you be willing to share the form and a bit about your experience?
Debra A. Mikels
Information Security Program Manager, Information Security and Privacy Office
Mass General Brigham
399 Revolution Drive, Suite 1225, Somerville, MA 02145