A compliance officer at a healthcare organization receives a request from law enforcement for patient records without a court order. What should the officer do first?
-
A
Immediately provide all requested records to cooperate with authorities
-
B
Consult legal counsel before releasing any patient information
-
C
Deny the request outright as it violates HIPAA
-
D
Notify the affected patients before responding