# A nurse discovers that a discharge summary containing protected health information was faxed to the wrong number. The unintended recipient calls immediately and says the pages were destroyed. Complete the confidentiality response. > source: MyMerci (mymerci.kr) > url: https://mymerci.kr/pages/nclex_q.php?qn_id=393393&lang=en > language: en > subject: Confidentiality/Information Security > category: MOC ## Question A nurse discovers that a discharge summary containing protected health information was faxed to the wrong number. The unintended recipient calls immediately and says the pages were destroyed. Complete the confidentiality response. The nurse should first ::선택::stop further disclosure and notify the supervisor and designated privacy contact according to policywait until discharge because the recipient said the pages were destroyedfax the same summary again to confirm the numberdiscuss the event with unrelated staff to obtain informal opinions. The nurse should then ::선택::delete every reference to the fax so the client will not worryrecord that no breach occurred before the privacy reviewpreserve an objective account of what was sent, the recipient, timing, discovery, and containment actionschange the fax log to show the intended number and ::선택::personally notify every client in the hospitalallow the authorized privacy team to complete the required assessment and determine notificationsassume page destruction automatically cancels all reporting dutiesask the unintended recipient to decide whether the event is reportable. ## Explanation The nurse should stop any further disclosure, preserve the facts, and immediately notify the supervisor and designated privacy or security contact according to policy. The report should objectively identify what was sent, to whom, when, how the error was discovered, and what containment steps occurred without altering the record or assigning blame. The covered entity's privacy team performs the required assessment and determines notifications or other actions under applicable law. A recipient's statement that pages were destroyed is relevant containment information but does not allow the nurse to conceal the event or declare that no breach occurred. ## In-depth explanation Correct Answer Contain the disclosure, notify the designated supervisor and privacy process immediately, preserve an objective account, and allow the authorized privacy team to determine the required assessment and notifications. Why It Fits Misdirected protected health information requires a prompt organizational response. The nurse contributes accurate facts and containment actions but does not independently make the legal breach determination. Clinical Picture The recipient's destruction of the pages may reduce exposure but does not erase the disclosure. The organization still needs the recipient, information type, amount, safeguards, and mitigation facts. Memory Link Contain, report, preserve the facts, and let the privacy process assess. NCLEX Rule Protect confidentiality without hiding an error. Follow the designated process and limit further disclosure to what is necessary for response and care. Why the Alternatives Fail Deleting documentation destroys the audit trail. Calling the event harmless without review exceeds the nurse's role. Contacting unrelated people spreads information further, and waiting until discharge delays containment and assessment. Source 1HHS HIPAA Breach Notification Rule 2HHS Safeguards for Fax and Electronic Disclosure 32026 NCLEX-RN Test Plan ## Clinical scenario The client is safe and still hospitalized. The nurse follows the organization's privacy and incident-response process and does not decide alone that destruction of the pages eliminates the disclosure or all reporting duties. ## Key concepts - **Protected health information** — Individually identifiable health information protected under applicable privacy requirements. - **Containment** — Immediate actions that limit further access, use, or disclosure while preserving facts for assessment. - **Breach risk assessment** — An authorized organizational review of the nature, recipient, acquisition or viewing, and mitigation of an impermissible disclosure. ## Related questions - [A nurse reviews several scenarios involving client information. Which scenarios represent …](https://mymerci.kr/pages/nclex_q.php?qn_id=363986&lang=en) - [A nurse manager discovers that a hospital-issued laptop containing the protected health in…](https://mymerci.kr/pages/nclex_q.php?qn_id=368101&lang=en) - [The charge nurse reviews eight uses or disclosures of protected health information. Drag e…](https://mymerci.kr/pages/nclex_q.php?qn_id=396455&lang=en) - [Review the timeline after protected health information is sent to the wrong recipient and …](https://mymerci.kr/pages/nclex_q.php?qn_id=535414&lang=en) - [Review the timeline after protected health information is sent to the wrong recipient and …](https://mymerci.kr/pages/nclex_q.php?qn_id=568927&lang=en) ## Read in another language - [en](https://mymerci.kr/pages/nclex_q.php?qn_id=393393&lang=en) - [ko](https://mymerci.kr/pages/nclex_q.php?qn_id=393393&lang=ko) - [ja](https://mymerci.kr/pages/nclex_q.php?qn_id=393393&lang=ja) - [zh-TW](https://mymerci.kr/pages/nclex_q.php?qn_id=393393&lang=zh-tw) - [vi](https://mymerci.kr/pages/nclex_q.php?qn_id=393393&lang=vi) --- More free questions: [NCLEX-RN Practice](https://mymerci.kr/pages/nclex_bank.php?lang=en) _For study reference only. Always follow current clinical guidelines and your institution’s protocols._