In certain cases, health information can be shared without patient consent. For example, data may be shared for treatment purposes, public health reasons, or when required by law. However, these exceptions are limited, and most sharing requires patient authorization.