Certified Medical Assistant (CMA AAMA)Communication and Legal/EthicalMedium
A medical assistant is asked by a patient's adult daughter for an update on her mother's condition. The daughter states, "My mother always tells me everything, so I'm sure she wouldn't mind." The medical assistant has no documentation of the patient consenting to share information with her daughter. What is the most appropriate response?
- ASuggest the daughter speak directly with the physician for any updates.
- BCall the patient to ask for verbal permission to speak with her daughter.
- CInform the daughter that due to patient privacy regulations, you cannot share information without the patient's direct consent.
- DProvide a brief, general update without revealing specific details.
Show answer & explanationAnswer & explanation
Correct answer: C. Inform the daughter that due to patient privacy regulations, you cannot share information without the patient's direct consent.
Under HIPAA, a medical assistant cannot disclose protected health information (PHI) to family members without the patient's explicit authorization, even if the family member claims the patient would approve. The most appropriate response is to state this clearly and professionally.
Why the other options are wrong
- A. Directing the daughter to the physician does not resolve the MA's immediate ethical and legal obligation regarding PHI disclosure.
- B. While obtaining verbal permission from the patient is an option for the patient, the medical assistant's immediate response to the daughter should be to explain the policy, not to offer to call the patient on the daughter's behalf.
- D. Even a 'brief' or 'general' update can violate HIPAA if no consent is on file.
PHI Disclosure to Family
Protected Health Information (PHI) generally cannot be disclosed to family members without the patient's explicit authorization or presence.
- Requires patient's written or verbal consent.
- Exceptions for emergencies or patient's presence.
- HIPAA governs these disclosures.
Memory trick: No Info Without Patient's Okay.