The person in charge of medical records for a physician's office is preparing to release medical records requested by an insurance company. Which of the following is a recommended guideline for this procedure?

A. Release the entire record, not just the information requested.
B. Include the patient's name, address, and date of birth on the authorization.
C. Warn the patient that once authorization is given, it cannot be rescinded.
D. Receive a verbal authorization from the patient prior to release of the record.
E. Receive specific approval from the patient, even with a general authorization on file.

B. Include the patient's name, address, and date of birth on the authorization.

Guidelines for authorization for releasing patient information include: (1) authorizations should be in writing, (2) authorizations should include the patient's name, address, and date of birth, (3) the patient should sign a general authorization, unless he or she is not a legal, competent adult. In that case, parents or guardians should sign authorizations. (4) Only the information specifically requested should be released, and (5) the patient has the right to rescind a consent to release information, in which case information should not be released.