Which scenario indicates a privacy breach in a healthcare setting?

Which scenario indicates a privacy breach in a healthcare setting?

• A. A patient’s chart is accessed only by the treating clinician
• B. Unauthorized access, use, or disclosure of protected health information (PHI) to individuals who are not authorized
• C. Routine sharing of patient information with family members with consent
• D. Filing routine patient data in the secure system

Answer: (B)

Protecting patient privacy means access to health information is limited to those who need it for care or for operations. A privacy breach happens when protected health information (PHI) is accessed, used, or disclosed by someone who isn’t authorized to see it. In healthcare, this means if a person outside the authorized care team (or without patient consent) views or shares PHI, that’s a breach. The scenario described—unauthorized access, use, or disclosure of PHI to individuals not authorized—matches this breach concept. The other cases show proper handling: a chart accessed only by the treating clinician is appropriate, sharing with family members is allowed with patient consent, and placing data in a secure system follows good security practices. This distinction helps ensure confidentiality and compliance with privacy protections like HIPAA.

Protecting patient privacy means access to health information is limited to those who need it for care or for operations. A privacy breach happens when protected health information (PHI) is accessed, used, or disclosed by someone who isn’t authorized to see it. In healthcare, this means if a person outside the authorized care team (or without patient consent) views or shares PHI, that’s a breach. The scenario described—unauthorized access, use, or disclosure of PHI to individuals not authorized—matches this breach concept. The other cases show proper handling: a chart accessed only by the treating clinician is appropriate, sharing with family members is allowed with patient consent, and placing data in a secure system follows good security practices. This distinction helps ensure confidentiality and compliance with privacy protections like HIPAA.