# The charge nurse reviews eight uses or disclosures of protected health information. Drag each situation to the appropriate privacy category.

> source: MyMerci (mymerci.kr)  
> url: https://mymerci.kr/pages/nclex_q.php?qn_id=396455&lang=en  
> language: en  
> subject: Confidentiality/Information Security  
> category: MOC

## Question

The charge nurse reviews eight uses or disclosures of protected health information. Drag each situation to the appropriate privacy category.

**1.** Send relevant discharge information through the approved channel to the receiving skilled nursing facility for treatment

Select a category
Permitted treatment or health-care operation
Privacy or security incident: contain and report
Requires authorization or another specific legal permission

**2.** Discuss the medication plan with the consulting pharmacist in a private clinical workspace

Select a category
Permitted treatment or health-care operation
Privacy or security incident: contain and report
Requires authorization or another specific legal permission

**3.** Use authorized PHI within the hospital's approved internal quality-improvement review

Select a category
Permitted treatment or health-care operation
Privacy or security incident: contain and report
Requires authorization or another specific legal permission

**4.** Email the full record to the client's employer at the employer's request without a signed authorization

Select a category
Permitted treatment or health-care operation
Privacy or security incident: contain and report
Requires authorization or another specific legal permission

**5.** Give the diagnosis to an adult sibling after the competent client explicitly declined family disclosure

Select a category
Permitted treatment or health-care operation
Privacy or security incident: contain and report
Requires authorization or another specific legal permission

**6.** Open a neighbor's chart out of curiosity without any role in the person's care

Select a category
Permitted treatment or health-care operation
Privacy or security incident: contain and report
Requires authorization or another specific legal permission

**7.** Post a room selfie in which the client's name is readable on the whiteboard

Select a category
Permitted treatment or health-care operation
Privacy or security incident: contain and report
Requires authorization or another specific legal permission

**8.** Leave a printed handoff sheet on an unattended cafeteria table

Select a category
Permitted treatment or health-care operation
Privacy or security incident: contain and report
Requires authorization or another specific legal permission

## Explanation

Relevant information may be shared for treatment and permitted care operations under policy. Disclosures outside treatment, payment, operations, or another legal permission generally require authorization. Curiosity access, visible identifiers in social media content, and unattended printed PHI are privacy or security incidents that must be reported rather than concealed.

## In-depth explanation

Quick answer
Ask who needs the information, for what permitted purpose, and through what secure channel.

Why this is correct
HIPAA permits information exchange for treatment and certain health-care operations, including care coordination and quality activities, subject to policy and applicable minimum-necessary rules. An employer request or a family member's request does not automatically authorize disclosure. Workforce curiosity access has no care purpose. A visible name on a social media image and a handoff sheet left in public expose PHI and require immediate reporting through the organization's privacy or security process.

NCLEX decision rule
Do not solve a privacy problem by deleting evidence or staying silent. Limit access, contain the exposure, and report it promptly.References
1HHS: HIPAA permitted uses and disclosures
2HHS: Summary of the HIPAA Privacy Rule

## Clinical scenario

Confidentiality and information security
Apply HIPAA treatment and health-care-operations permissions, client authorization requirements, the minimum-necessary principle where applicable, and immediate incident reporting.

## Key concepts

- **Blood Culture** — A test to identify organisms in the bloodstream.
- **Clean-Catch Urine** — A urine specimen collected to reduce contamination.
- **Sputum Specimen** — Respiratory secretion specimen used for certain infections such as TB.

## Related questions

- [A nurse reviews several scenarios involving client information. Which scenarios represent …](https://mymerci.kr/pages/nclex_q.php?qn_id=363986&lang=en)
- [A nurse manager discovers that a hospital-issued laptop containing the protected health in…](https://mymerci.kr/pages/nclex_q.php?qn_id=368101&lang=en)
- [A nurse discovers that a discharge summary containing protected health information was fax…](https://mymerci.kr/pages/nclex_q.php?qn_id=393393&lang=en)
- [Review the timeline after protected health information is sent to the wrong recipient and …](https://mymerci.kr/pages/nclex_q.php?qn_id=535414&lang=en)
- [Review the timeline after protected health information is sent to the wrong recipient and …](https://mymerci.kr/pages/nclex_q.php?qn_id=568927&lang=en)

## Read in another language

- [en](https://mymerci.kr/pages/nclex_q.php?qn_id=396455&lang=en)
- [ko](https://mymerci.kr/pages/nclex_q.php?qn_id=396455&lang=ko)
- [ja](https://mymerci.kr/pages/nclex_q.php?qn_id=396455&lang=ja)
- [zh-TW](https://mymerci.kr/pages/nclex_q.php?qn_id=396455&lang=zh-tw)
- [vi](https://mymerci.kr/pages/nclex_q.php?qn_id=396455&lang=vi)

---

More free questions: [NCLEX-RN Practice](https://mymerci.kr/pages/nclex_bank.php?lang=en)

_For study reference only. Always follow current clinical guidelines and your institution’s protocols._

