HIPAA Scenarios

You're a nurse, and your friend asks you about a mutual acquaintance who was recently admitted to your hospital. What should you do?

• Tell them the basics since they already know the person is in the hospital

• Refuse to disclose any information, even if the person is in the hospital

• Only confirm whether or not the person is a patient if asked directly

• Share information only if your friend promises not to tell anyone else

A popular local celebrity is admitted to your hospital. Reporters are calling to confirm their status. How should the hospital respond?

• Confirm the celebrity is a patient but give no other details

• Neither confirm nor deny the celebrity is a patient without their consent

• Give basic information about their condition to stop rumors

• Refer all questions to the celebrity's publicist

You're a medical receptionist. A patient's spouse calls to get the results of the patient's recent test. The spouse is not listed as an authorized contact. What do you do?

• Give the results since spouses typically share medical information

• Refuse to provide any information and hang up

• Explain that you can't disclose the information without the patient's permission

• Tell them to come to the office in person to get the results

A police officer comes to the ER asking for information about a patient involved in a car accident. What's the appropriate response?

• Provide all requested information to assist the investigation

• Refuse to provide any information without a warrant

• Provide only the minimum necessary information required by law

You notice a colleague accessing the medical records of their ex-spouse. What should you do?

• Ignore it, as it's not your business

• Confront the colleague directly

• Report the incident to your supervisor or compliance officer

• Warn the ex-spouse that their privacy may have been breached

A student intern at a clinic takes a selfie with a patient's x-ray visible in the background and posts it on social media. Is this a HIPAA violation?

• No, because the patient's name isn't visible

• Yes, because the x-ray is considered Protected Health Information

• No, as long as the intern deletes the post within 24 hours

• It depends on whether the patient can be identified from the x-ray alone

A nurse realizes she accidentally sent a patient's lab results to the wrong fax number. What should she do first?

• Hope the recipient destroys the fax and do nothing else

• Call the incorrect recipient and ask them to destroy the fax

• Report the incident to her supervisor immediately

• Call the patient and apologize for the mistake

A medical office is upgrading its computer systems. What should they do with the old computers containing patient information?

• Donate them to a local school after deleting all files

• Sell them to staff members at a discount

• Ensure all data is professionally wiped or hard drives destroyed before disposal

• Keep them in storage indefinitely to avoid any potential breaches

A patient posts a negative review of a doctor online, disclosing their own health condition. How should the doctor respond?

• Ignore the review to avoid any potential HIPAA violations

• Respond with a detailed rebuttal, including facts from the patient's case

• Respond generally about office policies without acknowledging the patient as a patient

• Ask a colleague to respond on their behalf

An unconscious patient is brought to the ER. A family member arriving later asks about their condition. What information can be shared?

• No information, as the patient hasn't given consent

• All available information, as it's a family member

• General condition and location in the hospital

• Information only if the family member can prove their relationship