According to the NAHQ CPHQ competency framework, requests for provider-specific performance or competency data must be handled in accordance with the organization’s approved policies and procedures. These policies are designed to ensure compliance with confidentiality, peer review protections, and legal requirements.

Option C is correct because organizational policies operationalize applicable laws and regulations and provide clear guidance on what information may be shared, with whom, and under what circumstances.

Option A may be relevant but is not the first operational step. Option B is inappropriate because peer review and competency information are typically protected and not released based solely on provider consent. Option D delays appropriate action without ensuring compliance.

The CPHQ exam emphasizes policy-driven decision-making in sensitive leadership situations.