In documenting consent for information sharing, which elements must be included?

• A. The patient’s date of birth only.
• B. The scope of data shared, purpose, expiration date, and revocation rights.
• C. The patient’s insurance policy number.
• D. The clinician’s preferred data sharing methods.

Answer: (B)

Consent documentation must clearly spell out what will be shared, why it’s being shared, for how long, and how the patient can withdraw that permission. The scope of data shared specifies exactly which records or data elements are included. The purpose explains the reason for sharing. An expiration date puts a time limit on how long the consent is active. Revocation rights indicate that the patient can retract consent at any time and how to do so. This combination protects patient autonomy and creates a clear, enforceable record of what is allowed.

Including only the patient’s date of birth, a policy number, or the clinician’s preferred data-sharing methods does not specify what data is being shared, for what purpose, for how long, or how to revoke—these elements are essential to a proper consent.