Under what circumstances is it permissible to share a client's personal information?

Sharing a client's personal information is a sensitive matter governed by principles of confidentiality and privacy. The correct choice, which indicates that sharing is permissible only with explicit consent or when required by law, aligns with the ethical standards and legal obligations that professionals must adhere to.

Explicit consent means that the client has given their informed permission to share specific information with designated individuals or entities. This helps to ensure that clients maintain control over their personal information and that it is not disclosed without their knowledge or agreement. On the other hand, there are instances where the law might require the sharing of personal information, such as reporting obligations under anti-money laundering laws or cases where there is a risk of harm to the client or others.

In contrast, the other choices do not align with established ethical principles. Requesting information from a friend of the client does not satisfy the necessity for consent, as the friend may not have a legitimate need to know the client's confidential information. Allowing information to be shared whenever the professional sees fit or based merely on verbal agreement lacks the necessary safeguards that protect client privacy. These approaches could lead to breaches of trust and legal liabilities, underscoring the importance of adhering to the correct procedure for handling personal information.