A practical nurse (PN) working in an outpatient pediatric clinic is reviewing various requests for client health information. Match each specific information request scenario with the appropriate disclosure determination based on HIPAA and client confidentiality standards.
- A public health department official calls to confirm a recent positive measles diagnosis in a 4-year-old client.Permitted disclosure; required by law for tracking and infectious disease control.
- A non-custodial parent with documented legal access rights requests a copy of their 6-year-old child's immunization record.Permitted disclosure; authorized individual with an established legal right to access the health record.
- A school nurse leaves a voicemail requesting the updated asthma action plan for a 10-year-old without a current signed release on file.Impermissible disclosure; requires a specific, signed authorization from the legal guardian prior to sharing the record.
- A 15-year-old client's parent asks to review the clinical progress notes from the adolescent's confidential reproductive health visit.Impermissible disclosure; protected information that cannot be shared without the minor client's specific consent.
Answer
Public health tracking of infectious diseases and requests from non-custodial parents with legal rights are permitted disclosures. Releasing records to a school without written consent and sharing a minor's confidential reproductive health records with a parent are impermissible disclosures.
The matches correctly apply HIPAA privacy rules and exceptions in an outpatient setting. Public health reporting for infectious diseases is a mandatory exception to HIPAA. Non-custodial parents retain legal access to their children's records unless a court order states otherwise. Conversely, sharing records with a school requires explicit parental authorization, and adolescents hold exclusive privacy rights over records for services they can legally consent to themselves, such as reproductive health.
Step-by-Step Solution
Key Concept
Confidentiality and Information Security Exceptions