Final answer:
A healthcare professional should not disclose a patient's test results to the son without a signed authorization form, respecting HIPAA rules and patient privacy.
Step-by-step explanation:
When a healthcare professional receives a call from a patient's son asking for information about the patient's test results without an authorization form on file, the professional should uphold patient confidentiality as required by HIPAA regulations. They cannot provide any information without explicit consent from the patient. The correct course of action is to inform the son that they need a signed authorization form to release any medical information. Only with the patient's consent can health records be discussed with family members.
Handling health records and patient information comes with the responsibility of balancing ethical considerations such as the patient's right to privacy and the need for responsible care. Patient privacy is paramount in healthcare, and professionals must ensure that they adhere to proper protocols when sharing health information.