What should you do when consent is re-evaluated due to new data sharing?

• A. Obtain updated consent as required and document the change.
• B. Ignore the change and proceed.
• C. Inform the client verbally but do not update the record.
• D. Remove consent from the record.

Answer: (A)

When data sharing is changing, you must revisit consent to make sure the client truly agrees to the new arrangement. The main idea is that consent isn’t a one-time checkbox; as how data is used or who it’s shared with evolves, the client needs to be informed and give explicit permission for those new terms.

Obtaining updated consent as required ensures the client understands exactly what will be shared, who will receive it, for what purpose, and for how long. It also respects their autonomy and aligns with privacy laws and organizational policies. Documenting that change creates an auditable record showing when and how consent was obtained, what the client agreed to, and that the organization followed proper procedures.

Choosing to ignore the change or rely only on a verbal heads-up misses the formal approval and the necessary record-keeping, leaving the client’s privacy protections and the organization’s compliance status at risk. Removing consent from the record would strip the client of control and could violate their rights and policy.

In practice, use a clear, updated consent process or form that outlines the new data-sharing details, obtain the client’s explicit agreement, and file or log the updated consent with the case records. This approach keeps the client informed, protects their rights, and maintains proper documentation for accountability.