Examkin

Question

Difficulty: MediumProfessionalism and Workplace Ethics

A third-year surgical resident is eating in the hospital cafeteria when approached by a surgical technician. The technician mentions that a prominent professional athlete was recently admitted to the orthopedic service for a complex joint repair. The technician, who is assigned to the general surgery service and has no role in the athlete's care, admits to reviewing the operative report in the electronic medical record (EMR) out of personal curiosity. The technician begins detailing the specific surgical hardware used. Which of the following is the most appropriate next step for the surgical resident?

  1. A
    Advise the technician to stop discussing the case in public, but take no further action since the resident is not the technician's direct supervisor
  2. B
    Access the athlete's EMR to independently verify the unauthorized viewing before filing a formal compliance report
  3. Direct the technician to stop discussing the case and report the unauthorized EMR access to the hospital's privacy officerAnswer
  4. D
    Interrupt the conversation and notify the primary orthopedic attending physician so they can determine the appropriate disciplinary measures
  5. E
    Warn the technician about the ethical violation and document the conversation in the athlete's medical record for transparency

Answer

The resident must immediately direct the technician to stop sharing patient information and report the unauthorized access to the hospital's privacy or compliance officer.
Physicians have a strict ethical and legal obligation under the Health Insurance Portability and Accountability Act (HIPAA) to protect patient confidentiality. Accessing a patient's EMR without a direct clinical role is a serious violation of privacy. When a physician becomes aware of such a breach, professionalism dictates two immediate actions: intervening to stop any further unauthorized disclosure of protected health information, and reporting the incident through official institutional channels. The hospital's designated privacy officer or compliance department is equipped to conduct a formal investigation, determine the extent of the breach, and fulfill legal requirements regarding patient notification.

Step-by-Step Solution

1
Identify the ethical and legal violation.
The technician accessed the electronic medical record (EMR) without a clinical need-to-know, which is a direct violation of HIPAA.
Recognizing a privacy breach is the first step in maintaining professionalism and protecting patient rights.
2
Address the immediate breach.
The resident must interrupt the technician to prevent any further disclosure of protected health information (PHI) in a public setting.
Physicians have a duty to actively protect patient confidentiality and mitigate ongoing harm.
3
Fulfill the mandatory reporting obligation.
The resident reports the incident to the hospital's privacy officer or compliance department.
Institutional protocols and federal regulations require formal reporting of unauthorized EMR access to ensure proper investigation and legally mandated patient notification.

Key Concept

Duty to report unauthorized access of protected health information (PHI)
Rate this question

Topics

Professionalism and Workplace Ethics

More questions from this topic