Question

Difficulty: HardConfidentiality and Information Security

An adult client with a profound intellectual disability is brought to the emergency department by their legally appointed guardian. During the physical assessment, the registered nurse observes multiple patterned bruises in various stages of healing, which are highly suggestive of physical abuse. The guardian becomes defensive and demands that the nurse immediately show them the current electronic health record (EHR) documentation regarding the assessment findings. Which of the following is the most appropriate action by the nurse?

  1. Deny the guardian's request to view the documentation to protect the client and immediately report the suspected abuse to adult protective services.Answer
  2. B
    Show the guardian the requested documentation, as legally appointed representatives generally have the right to access the client's health information, and separately notify protective services.
  3. C
    Delay entering the objective physical findings into the electronic health record until adult protective services has arrived to prevent the guardian from viewing the information.
  4. D
    Privately ask the client to provide verbal permission to withhold the assessment findings from the guardian to ensure the client's privacy rights are respected.

Answer

Deny the guardian's request to view the documentation to protect the client and immediately report the suspected abuse to adult protective services.
Under HIPAA regulations (45 CFR § 164.502(g)(5)), a healthcare provider may refuse to treat a person as a client's personal representative—and thereby deny them access to the client's protected health information—if the provider reasonably believes that the representative is subjecting the client to abuse or neglect, and that granting access could endanger the client. The nurse's priority is to protect the vulnerable client, deny the suspected abuser access to the findings, and fulfill mandatory reporting requirements to adult protective services.

Step-by-Step Solution

1
Identify the primary legal and ethical conflict in the scenario.
The conflict is between a legally appointed guardian's general right to access the client's medical records and the nurse's duty to protect a vulnerable client from suspected abuse by that same guardian.
Recognizing competing priorities is essential for determining the correct legal framework to apply.
2
Apply HIPAA Privacy Rule exceptions regarding personal representatives.
HIPAA allows healthcare providers to deny a personal representative (such as a guardian) access to the client's protected health information (PHI) if there is a reasonable belief that the representative is abusing or neglecting the client.
This specific HIPAA exception exists to ensure that privacy laws do not inadvertently endanger vulnerable victims of abuse.
3
Determine the appropriate nursing intervention.
The nurse must prioritize client safety by refusing the guardian's access to the documentation and fulfilling the legal mandate to report the suspected abuse to adult protective services.
Protecting the client from further harm and adhering to mandatory reporting laws are the highest priorities in this situation.

Key Concept

HIPAA Exceptions for Suspected Abuse and Mandatory Reporting
Rate this question