Question

Difficulty: HardConfidentiality and Information Security

A practical nurse (PN) is assisting the charge nurse with a unit-wide compliance audit regarding the protection of health information. During the shift, the PN observes several staff activities. Which of the following observed actions indicate a potential confidentiality breach and require immediate intervention? Select all that apply.

  1. An assistive personnel (AP) minimizing the electronic health record (EHR) window before walking away from a mobile workstation.Answer
  2. A staff nurse sharing a client's upcoming discharge needs with a visiting relative who is designated solely as the emergency contact.Answer
  3. A wound care specialist using a personal, unauthorized smartphone to capture an image of a client's pressure injury.Answer
  4. D
    A unit secretary declining to provide a client's room number to a caller who does not possess the correct privacy passcode.
  5. E
    A provider turning a computer monitor away from a high-traffic hallway before opening a client's diagnostic imaging report.
  6. F
    A nursing student depositing handwritten report notes into a locked, secure shredding bin prior to leaving the facility.

Answer

The actions requiring intervention are minimizing the EHR window before leaving a workstation unattended, sharing discharge information with a relative who is only an emergency contact, and using a personal smartphone for clinical photography.
The actions requiring intervention represent severe security vulnerabilities. Minimizing a screen instead of logging out allows anyone to access the open session. Relying on an emergency contact designation for routine updates without client consent violates privacy rules. Utilizing a personal device for clinical photography creates unencrypted, uncontrolled copies of protected health information outside the facility's secure network.

Step-by-Step Solution

1
Analyze the stem's objective.
The question asks to identify actions that represent a confidentiality breach and therefore require immediate intervention (i.e., incorrect or unsafe practices).
Understanding the negative framing is crucial; correct answers will be the inappropriate behaviors.
2
Evaluate each physical and electronic security practice observed.
Minimizing a screen is unsafe (intervention needed). Using a personal smartphone is a severe risk (intervention needed). Angling a screen away from the public and using secure shredding bins are safe practices (no intervention needed).
Physical and electronic safeguards are mandatory components of information security.
3
Evaluate the verbal disclosure scenarios.
Sharing information based solely on an emergency contact listing without client consent is a breach (intervention needed). Refusing to give information to a caller lacking the privacy code is appropriate (no intervention needed).
PHI can only be disclosed to authorized individuals or when explicit consent is provided.

Key Concept

Identifying and correcting breaches in confidentiality, including physical, electronic, and verbal disclosures of protected health information (PHI).
Rate this question