Which action demonstrates maintaining client confidentiality per HIPAA?

Which action demonstrates maintaining client confidentiality per HIPAA?

• A. Discussing a client's diagnosis with a colleague in the elevator
• B. Leaving the computer screen unlocked while stepping away briefly
• C. Sharing lab results with the client's adult child without consent
• D. Shredding all documents containing client information before disposal

Answer: (D)

Protecting patient information means preventing unauthorized access to PHI in every step, including what happens to records after they’re used. Shredding documents containing client information before disposal prevents anyone from reconstructing or retrieving sensitive data from discarded materials. This physical safeguard is a direct way to uphold privacy and comply with HIPAA’s emphasis on protecting confidential information, even when records are no longer active. By contrast, discussing a diagnosis in an elevator exposes PHI to bystanders, leaving a screen unlocked invites others to view private data, and sharing lab results with an adult child without proper consent constitutes an unauthorized disclosure. These actions violate patient privacy and HIPAA rules, which require protecting information and limiting disclosures to the minimum necessary with appropriate authorization. So shredding documents before disposal best demonstrates maintaining confidentiality.

Protecting patient information means preventing unauthorized access to PHI in every step, including what happens to records after they’re used. Shredding documents containing client information before disposal prevents anyone from reconstructing or retrieving sensitive data from discarded materials. This physical safeguard is a direct way to uphold privacy and comply with HIPAA’s emphasis on protecting confidential information, even when records are no longer active.

By contrast, discussing a diagnosis in an elevator exposes PHI to bystanders, leaving a screen unlocked invites others to view private data, and sharing lab results with an adult child without proper consent constitutes an unauthorized disclosure. These actions violate patient privacy and HIPAA rules, which require protecting information and limiting disclosures to the minimum necessary with appropriate authorization.

So shredding documents before disposal best demonstrates maintaining confidentiality.