Nursing Acceleration Challenge Exam (NACE) PN-RN Practice Test

What should nurse A do if nurse B, who is not assigned to a patient, asks for the password to access the patient’s electronic health record?

1. Advise nurse B that the request is a HIPAA violation

2. Provide the password to nurse B

3. Suggest nurse B ask the supervisor for permission

4. Allow nurse B to read the record over nurse A's shoulder

The correct answer is: Advise nurse B that the request is a HIPAA violation

When faced with a request from a colleague who is not assigned to a patient for access to that patient’s electronic health record, the best course of action is to advise that the request constitutes a violation of the Health Insurance Portability and Accountability Act (HIPAA). This law is designed to protect patient privacy and ensure that only authorized personnel have access to sensitive health information. By informing nurse B that their request is a potential HIPAA violation, nurse A is upholding legal and ethical standards. This action reinforces the importance of maintaining the confidentiality of patient information and emphasizes that all healthcare professionals have a responsibility to protect patient privacy. Unauthorized access or sharing of patient records could lead to serious repercussions, including disciplinary actions against the staff member and legal actions against the healthcare facility. In contrast, providing the password or suggesting that nurse B seek permission from a supervisor might mislead the colleague into thinking that unauthorized access is acceptable in certain circumstances, which is not aligned with best practices for patient confidentiality. Similarly, allowing nurse B to read the record over nurse A's shoulder further compromises patient privacy and confidentiality, undermining institutional policies regarding electronic health records.