Never post any patient information, photo, or identifiable detail on social media.
Before you read
Test yourself first: 5 questions
Question 1 of 5
A nurse is caring for a client when a reporter from a local newspaper calls asking to confirm whether the client is admitted. What is the nurse's correct response?
Answer: B. Under confidentiality and HIPAA, the nurse may not confirm or disclose any client information, including admission status, to unauthorized persons. The nurse should decline to release any information. Confirming admission or details breaches confidentiality regardless of the reporter's intent.
Question 2 of 5
Which situation is the clearest example of a violation of the Health Insurance Portability and Accountability Act (HIPAA)?
Answer: A. HIPAA protects the privacy and confidentiality of protected health information. Discussing identifiable client information in a public area such as an elevator, where it can be overheard by people not involved in care, is a breach. Sharing information with the treatment team, with consent, or for billing is permitted.
Question 3 of 5
A family member asks to see a client's chart. The nurse should:
Answer: B. Protect confidentiality — release records only with the client's authorization and per facility/legal process. Handing the chart over on request violates privacy.
Question 4 of 5
A nurse overhears two colleagues discussing a client by name in a public elevator. The nurse should:
Answer: B. This breaches confidentiality (HIPAA). Privately remind colleagues not to discuss clients in public areas and follow up per policy. Ignoring it allows the breach to continue.
Question 5 of 5
A client's family demands information the client asked to keep private. The nurse should:
Answer: B. Respect the client's right to confidentiality and their stated wishes — do not disclose without consent. Redirect the family to speak with the client.
Keep the streak going with more questions like these, each with a full rationale.
What is hipaa and confidentiality?
Nurses may share PHI only with those directly involved in the patient's care or as legally required. Breaching confidentiality can result in legal penalties and loss of licensure.
Key points to remember
- Protected health information may be shared only on a need-to-know basis with the care team.
- Patients have the right to access, review, and request corrections to their own medical record.
- Discussing patients in elevators, hallways, or on social media is a HIPAA violation.
- Mandatory reporting laws (abuse, certain communicable diseases) are legal exceptions to confidentiality.
- Information may not be released to family, employers, or others without the patient's written authorization.
- Computer screens, charts, and printouts must be secured so PHI is not visible to unauthorized people.
Nursing priorities
- Verify identity and authorization before releasing any patient information by phone or in person.
- Log off computers and shield screens to prevent unauthorized viewing of PHI.
- Discuss patient details only in private areas with members of the care team.
- Obtain written patient authorization before sharing records outside the treatment team.
- Report any suspected privacy breach through the facility's chain of command immediately.
Patient teaching
- You control who can receive your health information; tell us who is allowed to know.
- You may request a copy of your medical record and ask for corrections.
- We confirm identity before sharing any details to keep your information safe.
Red flags: report now
- Never post any patient information, photo, or identifiable detail on social media.
- Report immediately any access to a record without a care-related reason, including looking up family or coworkers.
- Do not give information to callers without confirming the patient has authorized release.
References
Clinical references for this topic
