Question

Difficulty: MediumConfidentiality and Information Security

A practical nurse (PN) is completing client care on a busy medical-surgical unit. Which actions by the PN demonstrate adherence to client confidentiality and information security protocols? Select all that apply.

  1. Logging off the electronic health record (EHR) immediately after documenting a nursing intervention.Answer
  2. B
    Confirming a client's admission status to a caller who identifies themselves as the client's employer.
  3. Placing printed daily care schedules into a designated secure shredding bin before leaving the facility.Answer
  4. D
    Sharing a personal computer password with a temporary agency nurse who is having trouble accessing the system.
  5. Lowering the voice to a hushed tone when conducting bedside shift handoff in a semi-private room.Answer

Answer

The correct actions are logging off the EHR after use, placing printed schedules in a secure shredding bin, and lowering the voice during handoff in a semi-private room.
Protecting protected health information (PHI) requires active measures in electronic, physical, and verbal domains. Logging off the computer prevents unauthorized digital access, utilizing secure shredding bins prevents physical data breaches from printed handoffs, and speaking quietly in shared spaces minimizes incidental verbal exposure.

Step-by-Step Solution

1
Evaluate each action for compliance with HIPAA and facility confidentiality policies.
Identify whether the action protects or compromises protected health information (PHI).
The PN must differentiate between secure practices and potential breaches.
2
Analyze the electronic security actions.
Logging off the EHR protects data, while sharing passwords violates security protocols.
Digital security requires individual accountability and preventing unauthorized access.
3
Analyze the physical and verbal security actions.
Shredding documents and lowering one's voice protect PHI, whereas confirming admission status to an unauthorized caller is a breach.
PHI exists in paper, verbal, and electronic formats, all of which require safeguarding.

Key Concept

Safeguarding Protected Health Information (PHI)
Rate this question