Which actions reflect HIPAA-compliant handling of protected health information (PHI) by a nurse? Select all that apply.
Select All That Apply
Choose your responses, then check the answer.
Explanation
HIPAA requires reasonable safeguards and limits many uses or disclosures to the minimum necessary information. A nurse should verify identity and authority before a phone disclosure. Information directly relevant to care may be shared with a spouse or another involved person when the patient agrees, does not object, or—if the patient is incapacitated or unavailable—the clinician uses professional judgment that sharing is in the patient's best interest. HIPAA also permits disclosures required by law and specified public-health or legal disclosures. Public elevator discussion is not an acceptable safeguard; a room number can still identify the patient.
HIPAA decision rule Verify who is asking, confirm the legal basis for disclosure, and share only what that purpose allows. A spouse does not receive unrestricted access automatically.
Family and friends HIPAA allows care-relevant information to be shared when the patient agrees or does not object. If the patient is incapacitated or unavailable, a clinician may use professional judgment to share information that is directly relevant and in the patient's best interest.
Official source HHS guidance on sharing with family and friends — https://www.hhs.gov/hipaa/for-professionals/faq/2086/does-hipaa-privacy-rule-permit-doctor-discuss-patient-s-health-status.html
Day shift on med-surg. Family member calls for update. Husband asks about wife condition while wife is asleep.
HIPAA — Health Insurance Portability and Accountability Act; US privacy and security rule for PHI.
minimum necessary — HIPAA standard limiting PHI disclosure to amount needed for purpose.
PHI — Protected Health Information; individually identifiable health data.