Which statement best describes a key patient privacy obligation for MRTs?

• A. Protect patient information, and disclose only as permitted for treatment, payment, and operations.
• B. Post patient identifiers in public areas to speed workflow.
• C. Ignore privacy laws if the patient gives verbal consent.
• D. Use patient information for marketing without consent.

Answer: (A)

Protecting patient information and sharing it only for legitimate purposes is the key obligation. MRTs must safeguard PHI and disclose it only as permitted for treatment, payment, and health care operations, which aligns with HIPAA and professional ethics. This approach keeps patient confidentiality intact while allowing essential care coordination and billing. The other options breach privacy: posting identifiers publicly exposes PHI; privacy laws still apply even with verbal consent; and using information for marketing without explicit consent violates confidentiality and legal requirements.