Question

Difficulty: MediumConfidentiality and Information Security

A registered nurse is participating in the resuscitation of a client in cardiac arrest. During the emergency, the nurse realizes that another client requires a time-sensitive capillary blood glucose check. To ensure the task is completed and recorded promptly, the nurse verbally provides their electronic health record (EHR) password to an unlicensed assistive personnel (UAP), instructing the UAP to obtain the glucose reading and document it using the nurse's login credentials. Which statement accurately describes the legal and ethical implications of the nurse's action?

  1. A
    The action is legally acceptable under emergency exception rules, provided the nurse changes their system password immediately after the resuscitation concludes.
  2. The nurse violated information security protocols, as login credentials must never be shared under any clinical circumstances.Answer
  3. C
    The action was an appropriate delegation because obtaining and recording routine blood glucose levels falls within the scope of practice for unlicensed assistive personnel.
  4. D
    The nurse correctly prioritized client care by ensuring both the resuscitation and the time-sensitive assessment were managed simultaneously.

Answer

The nurse violated information security protocols, as login credentials must never be shared under any clinical circumstances.
The correct answer identifies that sharing electronic health record (EHR) passwords is a strict violation of information security protocols. Passwords act as a legal digital signature. Sharing them compromises the integrity of the medical record and violates federal regulations (like HIPAA) as well as organizational policies, regardless of the clinical situation, staffing levels, or client acuity.

Step-by-Step Solution

1
Analyze the nurse's action of sharing electronic health record (EHR) passwords.
Sharing EHR credentials is a direct violation of federal privacy laws (HIPAA) and facility information security policies.
Credentials act as a unique digital signature for all documented care, maintaining the integrity and legal validity of the clinical audit trail.
2
Evaluate the context of the clinical emergency.
Emergencies do not negate federal information security laws.
The law requires strict access control to protected health information (PHI) at all times; clinical urgency does not justify unauthorized system access or password sharing.
3
Assess the delegation aspect involving the unlicensed assistive personnel (UAP).
While the UAP can perform the blood glucose check within their scope of practice, they must document it under their own secure system login.
Documenting care under another clinician's login constitutes falsification of the medical record.

Key Concept

Electronic Health Record (EHR) Security and Password Protection
Rate this question