NHA Certified Phlebotomy Technician (CPT)Safety and ComplianceMedium
Which of the following scenarios represents a violation of patient confidentiality according to HIPAA regulations?
- AA technician discusses a patient's lab results with the ordering physician.
- BA technician shares a patient's diagnosis with a family member who is not authorized.
- CA technician accesses a patient's record to prepare for a blood draw.
- DA technician provides patient information to a court with a valid subpoena.
Show answer & explanationAnswer & explanation
Correct answer: B. A technician shares a patient's diagnosis with a family member who is not authorized.
HIPAA (Health Insurance Portability and Accountability Act) protects patient privacy. Sharing protected health information (PHI) with unauthorized individuals, even family members, without the patient's explicit consent, is a direct violation of these regulations.
Why the other options are wrong
- A. This is permissible; healthcare providers involved in the patient's care can share information for treatment purposes.
- C. This is permissible; technicians can access records for treatment, payment, or healthcare operations (TPO).
- D. This is permissible; PHI can be released in response to a valid court order or subpoena.
HIPAA Confidentiality
The legal requirement under the Health Insurance Portability and Accountability Act to protect the privacy and security of protected health information (PHI).
- PHI includes all individually identifiable health information.
- Requires patient consent for most disclosures outside of TPO (Treatment, Payment, Operations).
- Violations can result in severe penalties.
Memory trick: Only 'S'hare 'P'atient 'H'ealth 'I'nfo when 'P'ermitted.