Hannah Wells Organization confidentiality policy

The Hannah Wells Organization confidentiality policy governs access to records that connect adopted children, their birth parents, adoptive families, and other agency information. The story presents it not as a quoted handbook provision but through Bethany’s clear sense that secure files are not hers to share with an unauthorized person. That boundary becomes consequential when Ransom asks for access in exchange for pretending to be her boyfriend, and Bethany must decide whether trust and a narrow promise can justify crossing it.

Identity and Scope

Bethany describes the Hannah Wells Organization as a nonprofit adoption agency whose work is to find good placements for children who might otherwise have poor prospects in the system. She knows that adoption organizations may be regarded with suspicion, and explains that the agency works to place children well. This professional setting matters to the confidentiality rule: the records are not incidental office paperwork, but institutional information about children and the adults connected to them.

The files include records of people who placed children for adoption and of the children themselves. Bethany also names donor information and tax details among the agency’s other records. The policy therefore protects more than one kind of sensitive data. The book does not supply a full written policy or enumerate its legal basis; its clearest stated requirement is that people without clearance must not be allowed into secure files.

Access and Authorization

Bethany’s first response to Ransom’s request is to consider the ethical and professional prohibition directly. She is not supposed to let anyone without clearance access the secure files, and she still does not know why he wants to search the databases. The fact that she is an executive does not make the boundary disappear: she considers offering him money instead, rather than casually treating her access as hers to transfer.

Ransom declines the cash alternative and offers to play her boyfriend or even her husband for the reunion weekend in exchange for secure access. Bethany then tests the limits of the arrangement. She asks for assurances that the access will not lead to anything traceable to her, anything extremely illegal, or anything that would hurt people. Ransom refuses to disclose his purpose, but argues that the database concerns adoption records and asks what such information could enable. Bethany also raises the possibility that he might use information to blackmail someone; his name sharpens her worry, though she does not claim to know what he intends.

The bargain does not erase the policy or resolve Bethany’s uncertainty. Her calculation is conditional: if Ransom keeps his end of the deal and nothing can be traced back to her, she believes she could avoid losing her job and receive the benefit of the boyfriend arrangement without spending the money she had set aside. She thinks of the potential cost of dismissal as well as the vacation she might otherwise afford. At the restaurant, she pays both checks and tips, then recognizes the full stakes of letting a stranger stay at her parents’ house, pose as her partner, and access confidential work information. She keeps a fallback in mind: if he behaves badly, she can pay him instead of granting access, and she believes she could call the police if necessary.

Controlled Access in Practice

The access eventually granted is presented as limited rather than as unrestricted entry to the agency’s records. After an intimate wager, Bethany asks whether Ransom still wants access to the adoptive parents database. He says that he does. She uses her laptop to enter the secure area of the company website and navigate to the requested database, then hands the computer to him and gives him privacy while he searches. Her choice is deliberate, but her curiosity and concern about what he might do remain.

Later, Bethany gives Ransom credentials for two distinct resources: the adopted-children database and the records site for parents who relinquished children. She explicitly limits the login she provides to that records site and warns him not to try it elsewhere, since doing so could lock her out and require an explanation. She directs him to use her laptop because the agency recognizes it as authorized, and supplies the password needed to access it. The episode makes the rule concrete through separate databases, scoped credentials, an approved device, and the risk of disrupting her own access. These safeguards do not prevent her from sharing access, but they show that authorization is specific rather than a general license to browse.

Breach, Purpose, and Consequences

Ransom’s purpose is to discover his birth identity. His parents had adopted a child through the agency, but the record identifying the adopted child was separated from their dossiers because he had been a minor. The adoption had occurred about twenty years earlier, and it was closed: public-record searches could not give him what he needed, while the state’s limited paperwork might already have been destroyed. He therefore believed the agency’s records might be the only remaining route to the information.

Using Bethany’s access, he searches the Children Served by Us database under Patrick Nolan, the name he had used before. The result identifies him as a child placed with Janice and Raymond Nolan at age two. His file records an above-average intelligence assessment and minor behavioral issues described as consistent with unstable attachment to his birth parents, but does not list those parents. An attached file supplies his birth name, Patrick Cartwright. The separate birth-parent database then connects that name to Genevieve Cartwright and Alexander Cartwright.

The policy’s tension is therefore not simply that an employee breaks a rule. Restricted access keeps a closed adoption’s divided records difficult to reunite, while the same records are the means by which Ransom can recover names and a history unavailable through public searches. Bethany’s carefully narrowed permission enables a real disclosure, not merely a hypothetical one; the evidence establishes that Ransom finds the names he sought, but does not establish that Bethany is fired or that the access causes harm to another person. The rule’s significance lies in the conflict it exposes between institutional confidentiality, an employee’s responsibility to protect records, and the human stakes of a person trying to learn his origins.