Question

Difficulty: MediumConfidentiality and Privacy

A 45-year-old man is evaluated in the emergency department for a deep laceration on his right forearm. He is accompanied by police officers who report finding him intoxicated near the scene of an altercation. During the medical evaluation, the patient becomes highly agitated and repeatedly shouts, "As soon as I get out of here, I'm going to kill my neighbor, John Smith, at 123 Main Street! He's the one who cut me!" The patient is medically stabilized, his laceration is repaired, and he is subsequently placed on an involuntary psychiatric hold due to the credible homicidal threat. He explicitly demands that the physician tell absolutely no one about his statements or his medical treatment. Under standard medical ethics and federal privacy regulations, which of the following disclosures of this patient's protected health information are legally permissible or required without his authorization? (Select all that apply)

  1. Informing the specifically identified neighbor about the patient's threatAnswer
  2. Notifying local law enforcement agencies regarding the patient's stated homicidal intentAnswer
  3. Sharing the patient's clinical evaluation and treatment records with the receiving inpatient psychiatric facilityAnswer
  4. D
    Disclosing the patient's violent behavior to his current employer to prevent potential workplace incidents
  5. E
    Providing a clinical update to the patient's adult daughter, who was not present but called the hospital inquiring about his status

Answer

The legally permissible and required disclosures include warning the intended victim (the neighbor), notifying law enforcement of the threat, and sharing medical records with the receiving psychiatric facility for continuity of care.
The principle of confidentiality has strict boundaries designed to protect both the patient's continuity of care and public safety. When a patient presents a credible, imminent threat to an identifiable third party, the 'Duty to Protect' permits and often mandates breaching confidentiality to warn the specific victim and to notify law enforcement. Furthermore, under HIPAA privacy rules, providers are permitted to disclose protected health information without a patient's consent when it is required for 'Treatment' (such as transferring medical records to an accepting psychiatric facility).

Step-by-Step Solution

1
Analyze the patient's statements and behavior in the emergency department.
The patient made a specific, credible threat of severe harm against an identifiable individual (his neighbor).
Identifying a specific threat is necessary to determine if the Tarasoff exception (Duty to Protect) applies.
2
Evaluate the ethical and legal obligations regarding the specific threat.
The Duty to Protect overrides standard patient confidentiality, allowing or requiring the physician to notify both the intended victim and law enforcement.
Protecting public safety and identifiable targets from imminent harm supersedes the ethical duty of patient privacy.
3
Evaluate the patient's request to withhold medical information from other healthcare entities.
Information must still be shared with the receiving psychiatric facility.
HIPAA provides a specific exception allowing covered entities to share protected health information without patient authorization for Treatment purposes, ensuring safe and continuous clinical care.
4
Rule out inappropriate disclosures.
Disclosing to the employer or the adult daughter is not permitted.
Neither the employer nor the daughter are targets of the threat, nor are they involved in his direct medical treatment under the established exceptions.

Key Concept

Exceptions to confidentiality including the Duty to Protect (Tarasoff) and disclosures for Treatment, Payment, and Healthcare Operations (TPO).
Estimated Time:1m 30s
Rate this question