COPE Health Scholars Practice Test

Which one of the following is NOT an example of a HIPAA breach?

1. Telling friends about hospital patients

2. Leaving PHI papers unattended

3. Discussing health information privately

4. Posting patient information on social media

The correct answer is: Discussing health information privately

The choice that represents a situation that is NOT an example of a HIPAA breach is the act of discussing health information privately. This implies that the conversation is occurring in a secure and confidential manner, likely with individuals who have a legitimate reason to know the information, such as other healthcare professionals involved in the patient's care. Under HIPAA, protected health information (PHI) can be shared among authorized personnel for treatment, payment, or healthcare operations, provided that this communication is kept private and not disclosed to individuals who do not have a right to know. In contrast, the other actions listed, such as telling friends about hospital patients, leaving PHI papers unattended, and posting patient information on social media, all involve unauthorized access or disclosure of PHI, which are clear violations of HIPAA regulations. These actions put patients' private health information at risk and can lead to significant penalties under HIPAA guidelines.