When an authorization is executed by an individual with segmented health records, an important question is whether the entire health record. On the one hand, an important reason for segmentation is to prevent the routine disclosure of unlimited health information to third parties, such as employers. On the other hand, an employer might have a legitimate need to know health information that the individual has placed in a separate, segmented file. For example, a bank considering hiring an individual for the position of armed security guard would have a legitimate interest in learning whether the individual had a history of mental illness or substance abuse. Limiting disclosure to non-segmented information might put the public at risk. If some segmented information is considered relevant, only that type of information should be disclosed. In the bank guard example, even though substance abuse and mental health might be relevant, reproductive health or genetic information would be irrelevant. Health information policy demands that employers should have access only to specific types of segmented information and only in situations with a demonstrable need to know.