How should an LCPAA manage the confidentiality of a child's records when working with foster families?

• A. Limit access to necessary personnel, secure storage, consent for disclosure, and compliance with laws
• B. Share records broadly with all foster families
• C. Store records in unsecured locations
• D. Disclose records without consent when convenient

Answer: (A)

Protecting confidentiality means controlling who can see a child’s records, keeping those records securely stored, obtaining proper consent before sharing information, and following the law. In practice, an LCPAA should make sure that only staff and approved foster-family case managers who truly need the information to support the child’s care have access. Records should be kept secure—paper files in locked cabinets and electronic records in password-protected, encrypted systems with clear access controls and audit trails. Before sharing anything with a foster family, obtain written, specific consent that states what can be disclosed, to whom, and for what purpose; maintain a record of every disclosure and review access rights regularly as staff roles change. Compliance with applicable laws and regulations—state child-welfare statutes, privacy protections, and federal requirements—must be ongoing. Understand the circumstances that allow disclosure without consent, such as mandated reporting or emergencies involving imminent risk, but otherwise keep disclosures limited to what is necessary and authorized. This approach protects the child’s privacy while enabling appropriate support and safety.