Question

Difficulty: MediumConfidentiality and Information Security

A practical nurse (PN) answers a telephone call at the nurses' station on a cardiac step-down unit. The caller identifies themselves as a coworker of a specific individual and asks, "We are all so worried about our friend. Have they shown any improvement since their heart attack?" Which is the appropriate response by the PN?

  1. "I cannot confirm or deny the presence of any individual in our facility without a designated privacy code."Answer
  2. B
    "The client is currently resting comfortably, but I am unable to provide any further medical details."
  3. C
    "Let me transfer your call directly to the client's room so you can speak with them."
  4. D
    "I cannot give you a medical update over the phone, but you are welcome to come during visiting hours."

Answer

The nurse must state that they cannot confirm or deny the individual's presence in the facility without a designated privacy code.
The appropriate nursing action when receiving an unauthorized inquiry is to protect the client's privacy completely. Under HIPAA regulations, a nurse cannot disclose any protected health information, which includes confirming or denying whether an individual is a client at the facility, unless the caller provides a pre-established privacy code or the client has explicitly authorized the disclosure.

Step-by-Step Solution

1
Analyze the caller's request and their relationship to the client.
The caller is a coworker asking for a medical update and confirming the client's presence.
To determine if the caller has authorized access to protected health information (PHI).
2
Apply HIPAA rules regarding the disclosure of PHI over the telephone.
Information, including the mere presence of a client in the facility, cannot be released without explicit client consent or a privacy passcode.
Federal law strictly protects client confidentiality against unauthorized disclosures, even to well-intentioned friends or coworkers.
3
Evaluate the response options for compliance with confidentiality protocols.
Only the response that refuses to confirm or deny the client's presence maintains full confidentiality.
Any other response (updating status, transferring the call, or inviting a visit) improperly acknowledges that the individual is receiving care at the facility.

Key Concept

HIPAA Privacy Rule and Telephone Disclosures
Estimated Time:1m 0s
Rate this question