Which statement describes how confidential client data should be handled regarding sharing?

• A. Release only information that client authorizes
• B. You can share data with anyone
• C. Never release anything
• D. You must always release to law enforcement only

Answer: (A)

Confidential client data should be shared only with people the client has explicitly authorized, and only to the extent necessary to fulfill the engagement. This respects the client’s privacy, maintains trust, and aligns with ethical and legal duties to keep information confidential. You disclose information only when the client has given permission to do so, and you limit disclosure to what is needed.

There are legitimate reasons for disclosure without consent in certain situations, such as when required by law or a court order, or to prevent imminent harm, but those are exceptions handled through proper procedures. Sharing data with anyone without authorization breaches confidentiality, never releasing anything is impractical and ignores legitimate needs or legal duties, and releasing only to law enforcement ignores client consent and other valid disclosure scenarios.