A student is at the nurses' station. A visitor walks up to the nurses' station and introduces herself as Mrs. Smith's daughter. The visitor asks what the results of Mrs. Smith's labs are this morning. The student tells the visitor the results of the labs. This action is a violation of HIPAA policy?

Answer 1

Yes, this is a violation of HIPAA policy. The student should not disclose Mrs. Smith's medical information to anyone who is not authorized to have access to it, even if they claim to be a family member. The proper protocol would be to verify the visitor's identity and relationship to the patient before disclosing any information.