👤 By the CinnaRN Clinical Content Team🕐 Updated 2026-08-23🏷️ Management of Care🔖 Free to read, print, and share
Also known as: privacy law · patient privacy · health information privacy · HIPPA
💡
Use this quick-reference guide to spot, treat, and prevent HIPAA and Confidentiality on the NCLEX. Keep it handy during review and on exam day!
🩺
📒 The 1-minute cheat sheet
📌 Def
PHI = identifiable health info
Share only minimum necessary
Care team need-to-know basis
✅ Do
Log off computer, lock charts
Verify before phone info release
Get written consent to share
📌 Avoid
No hallway/elevator talk
No social media posts re: pts
Don't share w/ family w/o OK
🚩 Report
Breach → notify supervisor now
Exceptions: abuse, court order
📚 HIPAA and Confidentiality — full study notes
The cheat sheet above is your quick recall card. These notes go deeper — what it is, what to do first, what must be reported, and what to teach.
HIPAA (Health Insurance Portability and Accountability Act) protects the privacy and security of a patient's protected health information (PHI). Nurses may share PHI only with those directly involved in the patient's care or as legally required. Breaching confidentiality can result in legal penalties and loss of licensure.
🔑
Key points
Understand these first
Protected health information may be shared only on a need-to-know basis with the care team.
Patients have the right to access, review, and request corrections to their own medical record.
Discussing patients in elevators, hallways, or on social media is a HIPAA violation.
Mandatory reporting laws (abuse, certain communicable diseases) are legal exceptions to confidentiality.
Information may not be released to family, employers, or others without the patient's written authorization.
Computer screens, charts, and printouts must be secured so PHI is not visible to unauthorized people.
✅
Nursing priorities
What to do, in order
Verify identity and authorization before releasing any patient information by phone or in person.
Log off computers and shield screens to prevent unauthorized viewing of PHI.
Discuss patient details only in private areas with members of the care team.
Obtain written patient authorization before sharing records outside the treatment team.
Report any suspected privacy breach through the facility's chain of command immediately.
🚩
Red flags — report now
Escalate immediately
Never post any patient information, photo, or identifiable detail on social media.
Report immediately any access to a record without a care-related reason, including looking up family or coworkers.
Do not give information to callers without confirming the patient has authorized release.
🗣️
Patient teaching
What patients must know
You control who can receive your health information; tell us who is allowed to know.
You may request a copy of your medical record and ask for corrections.
We confirm identity before sharing any details to keep your information safe.
❓ HIPAA and Confidentiality: NCLEX FAQs
What are the priority nursing interventions for HIPAA and Confidentiality?
Verify identity and authorization before releasing any patient information by phone or in person. Log off computers and shield screens to prevent unauthorized viewing of PHI. Discuss patient details only in private areas with members of the care team. Obtain written patient authorization before sharing records outside the treatment team.
What are the warning signs of HIPAA and Confidentiality a nurse must report?
Never post any patient information, photo, or identifiable detail on social media. Report immediately any access to a record without a care-related reason, including looking up family or coworkers. Do not give information to callers without confirming the patient has authorized release.
What do I need to know about HIPAA and Confidentiality for the NCLEX?
Protected health information may be shared only on a need-to-know basis with the care team. Patients have the right to access, review, and request corrections to their own medical record. Discussing patients in elevators, hallways, or on social media is a HIPAA violation. Mandatory reporting laws (abuse, certain communicable diseases) are legal exceptions to confidentiality.
What patient teaching is important for HIPAA and Confidentiality?
You control who can receive your health information; tell us who is allowed to know. You may request a copy of your medical record and ask for corrections. We confirm identity before sharing any details to keep your information safe.
✨
Quick Tip
Protected health information may be shared only on a need-to-know basis with the care team.