Examkin

Question

Difficulty: MediumConfidentiality and Privacy

A 19-year-old male college student who lives in a campus dormitory is brought to the emergency department with a 1-day history of high fever, severe headache, and neck stiffness. He is lethargic and photophobic. A lumbar puncture is performed, and cerebrospinal fluid analysis reveals Gram-negative diplococci. The patient is admitted to the intensive care unit and started on intravenous antibiotics for suspected Neisseria meningitidis meningitis. A few hours later, the university's dean of students calls the physician. The dean states they have heard a student was hospitalized with meningitis and requests the student's name and dorm room number so the university can urgently notify other students on the same floor and initiate environmental cleaning protocols. The patient is currently encephalopathic and lacks the capacity to provide consent for the release of his medical information. Which of the following is the most appropriate next step regarding the dean's request?

  1. A
    Provide the student's name and room number to the dean to facilitate immediate post-exposure prophylaxis for roommates
  2. Decline the dean's request and report the diagnosis to the local public health departmentAnswer
  3. C
    Disclose the dorm building and floor to the dean but withhold the specific room number and student's name
  4. D
    Contact the patient's next of kin to obtain surrogate authorization for disclosing the information to the university
  5. E
    Inform the dean that the information will be released only upon receipt of a subpoena or court order

Answer

Decline the dean's request and report the diagnosis to the local public health department.
The correct action is to decline the university's request and report the case to the local department of public health. Neisseria meningitidis is a mandatory reportable disease. Under the Health Insurance Portability and Accountability Act (HIPAA), physicians are legally permitted and required to disclose protected health information without patient authorization to authorized public health officials for the purpose of disease control. However, university administrators are not public health authorities. Disclosing this information directly to the dean without patient or surrogate consent violates HIPAA. The public health department has the legal authority and established protocols to conduct contact tracing, determine the need for post-exposure prophylaxis among close contacts, and coordinate with the university while minimizing unnecessary privacy breaches.

Step-by-Step Solution

1
Identify the primary legal and ethical dilemma
The physician is asked by a non-medical university official for protected health information of an incapacitated patient with a highly contagious, reportable disease.
Recognizing the conflict between patient confidentiality under HIPAA and the need for public safety and contact tracing is essential.
2
Evaluate the exceptions to HIPAA regarding public health
HIPAA allows disclosure of protected health information without consent to authorized public health authorities (e.g., local health department, CDC) for disease control, but NOT to university administrators.
Meningococcal meningitis is a mandatory reportable disease, requiring strict adherence to legal reporting channels rather than ad-hoc disclosures to third parties.
3
Determine the most appropriate next step
The physician must refuse the dean's request to protect confidentiality and immediately notify the local health department.
The health department has the legal jurisdiction and expertise to conduct contact tracing and coordinate post-exposure prophylaxis with the university.

Key Concept

Under HIPAA, physicians must report mandatory communicable diseases to authorized public health departments, but they cannot disclose protected health information to non-authorized entities (like school administrators or employers) without patient consent, even during an outbreak.
Estimated Time:1m 0s
Rate this question

Topics

Confidentiality and Privacy

More questions from this topic