Question

Difficulty: HardConfidentiality and Information Security

An emergency department triage nurse is caring for an alert, competent adult client who is seeking treatment for injuries sustained in an incident of domestic violence. The client explicitly requests that their presence in the facility remain completely confidential. Shortly afterward, a uniformed police officer approaches the nurse's station, states they need to serve a protective order on the client, and asks for the client's room number. The officer does not possess a warrant or a subpoena. Which of the following is the most appropriate action for the nurse to take?

  1. State that federal privacy laws prohibit confirming or denying the presence of any individual in the facility.Answer
  2. B
    Confirm the client's presence, because all suspected cases of domestic violence mandate immediate reporting to law enforcement.
  3. C
    Ask the officer to remain at the desk while the nurse asks the client if they are willing to speak with the police.
  4. D
    Direct the unlicensed assistive personnel (UAP) to verify the officer's badge number before releasing the client's location.

Answer

The nurse must state that privacy laws prohibit confirming or denying the presence of any individual in the facility.
Under the Health Insurance Portability and Accountability Act (HIPAA), clients have the right to request that their information be excluded from the hospital directory. When a client opts out, healthcare staff are legally prohibited from confirming or denying the client's presence in the facility to anyone, including law enforcement, unless presented with a valid warrant, court order, or subpoena. Because the client is a competent adult, mandatory reporting laws for child or elder abuse do not apply, meaning the nurse must strictly maintain total confidentiality.

Step-by-Step Solution

1
Analyze the client's request and clinical status.
The client is a competent adult who has explicitly requested total confidentiality, effectively opting out of the hospital's public directory.
Competent adults have the legal right under HIPAA to restrict who knows about their hospitalization.
2
Evaluate the law enforcement officer's request against legal exceptions.
The officer does not have a warrant or subpoena. Furthermore, domestic violence against a competent adult does not automatically trigger mandatory reporting to law enforcement.
Exceptions to HIPAA for law enforcement generally require a court order, warrant, or a specific mandatory reporting trigger (such as a gunshot wound or child/elder abuse).
3
Determine the appropriate nursing intervention.
The nurse must protect the client's Protected Health Information (PHI) by refusing to acknowledge the client is even present in the emergency department.
Any other action, including asking the client for permission in real-time, inadvertently confirms the client's presence and violates federal privacy laws.

Key Concept

HIPAA Facility Directory Opt-Out and Law Enforcement Exceptions
Rate this question