Práctica ASWB Masters

An insurer reviewing a claim asks a clinic for a client's psychotherapy notes, which the social worker keeps separate from the rest of the medical record. Under the HIPAA Privacy Rule, what is needed to release them?

• ANothing, because payment disclosures do not need authorization
• BA subpoena from the insurer's attorney
• CA specific written authorization from the client
• DApproval from the clinic's privacy officer