The partner of a patient comes into the office demanding to know what the patient was seen for and why they were charged for the visit. Which of the following the best way for the medical assistant to handle this situation when no medical records release authorization form is on file?

A. Advise them that privacy regulations prevent releasing patient information regardless of their relationship to the patient: Privacy regulations, such as those outlined in HIPAA, restrict the release of patient information without proper authorization, regardless of the inquirer’s relationship to the patient.
B. Verbally share the patient information with them since they are the subscriber on the patient's medical insurance: Even if the partner is the insurance subscriber, patient information cannot be disclosed without the patient’s explicit authorization.
C. Reassure them that they have nothing to worry about since their partner's visit was only a follow-up to a minor surgery: Providing details about the visit without authorization violates patient privacy and confidentiality.
D. Instruct them to provide proof of identity prior to providing the requested information: Proof of identity is not sufficient without a medical records release authorization form to disclose patient information.