What is essential when transferring radiographs electronically regarding privacy and authorization?

• A. Unencrypted transfer is acceptable with patient verbal consent.
• B. Secure transfer with proper authorization and privacy protections.
• C. Post to a public portal.
• D. Print and mail without consent.

Answer: (B)

Transferring radiographs electronically must protect patient privacy and ensure access is limited to those who are authorized. Radiographs contain protected health information, so the method of transfer should be encrypted and occur through secure, HIPAA-compliant channels with proper authentication and access controls, plus an auditable record of the transmission. There also needs to be documented authorization from the patient (or a legally authorized representative) and the transfer should be strictly limited to the care of the patient and the providers involved. The other options break confidentiality: unencrypted transfers—even with verbal consent—risk exposure; posting to a public portal makes PHI accessible to anyone; and printing and mailing without consent bypasses electronic safeguards and consent requirements.