On a Sunday afternoon, a surgical oncologist and his family attend a football game in the city where he practices. While at the game, he runs into a physician colleague that works at the same institution. After some casual small talk, his colleague inquires, "Are you taking care of Mr. Clarke, my personal trainer? I heard through the grapevine that he has melanoma, and I didn't know if you have started him on any chemotherapy or performed any surgical intervention yet. Hopefully you'll be able to take very good care of him." In this situation, the surgical oncologist may confirm which of the following?
Q2
A 17-year-old male, accompanied by his uncle, presents to a doctor with his arm in a sling. There is blood dripping down his shirt. He pleads with the physician to not report this injury to authorities, offering to pay extra for his visit, as he is afraid of retaliation from his rival gang. The physician examines the wound, which appears to be a stabbing injury to his left anterior deltoid. This case study in medical ethics asks: How should the physician best handle this patient's request?
Q3
A 42-year-old woman presents to the physician with symptoms of vague abdominal pain and bloating for several months. Test results indicate that she has ovarian cancer. Her physician attempts to reach her by phone multiple times but cannot reach her. Next of kin numbers are in her chart. According to HIPAA regulations, who should be the primary person the doctor discusses this information with?
Q4
A 62-year-old man comes to his primary care physician with a 3-month history of insomnia and severe work anxiety. He says that he is unable to retire because he has no financial resources; however, the stress level at his work has been causing him to have worsening performance and he is afraid of being fired. He thinks that he would be able to resume work normally if he was able to decrease his level of anxiety. His physician prescribes him a trial 1-month regimen of benzodiazepine therapy and schedules a follow-up appointment to see whether this treatment has been effective. Three weeks later, the patient's wife calls and says "My husband was fired from work and it's your fault for prescribing that medication! I know he must have been taking too much of that drug. Don't you know that he had a horrible problem with drug abuse in his 30s?" Which of the following is the most appropriate first action for the physician to take?
Q5
A 32-year-old man visits a clinic for routine health check-up. He discloses having an extramarital relationship several months ago and requests screening for sexually transmitted infections. One week later, his fourth-generation HIV antibody and antigen test returns positive. After appropriate counseling about the diagnosis, the patient explicitly requests that his HIV status not be disclosed to anyone, including his wife. The patient's wife is also registered as a patient at the same clinic. According to US medical ethics and patient confidentiality laws, what is the most appropriate next step for the physician?
Q6
A 68-year-old man presents to the physician for a follow-up examination, accompanied by his spouse. Two years ago, he was diagnosed with localized prostate cancer, for which he underwent radiation therapy. He was recently diagnosed with osteoblastic metastases to the spine and is scheduled to initiate physical therapy next week. In private, the patient’s spouse says that he has been losing weight and wetting the bed, and she tearfully asks the physician if his prostate cancer has returned. She says that her husband has not spoken to her about his health recently. The patient has previously expressed to the physician that he does not want his spouse to know about his condition because she “would worry too much”. Which of the following initial statements by the physician is most appropriate?
Q7
An 86-year-old male is admitted to the hospital under your care for management of pneumonia. His hospital course has been relatively uneventful, and he is progressing well. While making morning rounds on your patients, the patient's cousin approaches you in the hallway and asks about the patient's prognosis and potential future discharge date. The patient does not have an advanced directive on file and does not have a medical power of attorney. Which of the following is the best course of action?
Q8
A 27-year-old woman presents with painful urination and malodorous urethral discharge. She states she has a single sexual partner and uses condoms for contraception. The patient's blood pressure is 115/80 mm Hg, the heart rate is 73/min, the respiratory rate is 14/min, and the temperature is 36.6℃ (97.9℉). Physical examination shows swelling and redness of the external urethral ostium. There is a yellowish, purulent discharge with an unpleasant odor. The swab culture grows N. gonorrhoeae. The doctor explains the diagnosis to the patient, and they discuss the importance of notifying her partner. The patient says she doesn't want her partner to know about her diagnosis and begs the doctor to not inform the health department. She is anxious that everybody will find out that she is infected and that her partner will leave her. She promises they will use barrier contraception while she is treated. Which of the following is the most appropriate course of action?
Q9
A 54-year-old man suffered an anterior wall myocardial infarction that was managed in the cath lab with emergent coronary stenting and revascularization. The patient states that his wife, adult children, and cousins may be disclosed information regarding his care and health information. The patient has been progressing well without any further complications since his initial catheterization. On hospital day #3, a woman stops you in the hall outside of the patient's room whom you recognize as the patient's cousin. She asks you about the patient's prognosis and how the patient is progressing after his heart attack. Which of the following is the most appropriate next step?
Q10
An 86-year-old man is admitted to the hospital for management of pneumonia. His hospital course has been relatively uneventful, and he is progressing well. On morning rounds nearing the end of the patient's hospital stay, the patient's cousin finally arrives to the hospital for the first time after not being present for most of the patient's hospitalization. He asks about the patient's prognosis and potential future discharge date as he is the primary caretaker of the patient and needs to plan for his arrival home. The patient is doing well and can likely be discharged in the next few days. Which of the following is the most appropriate course of action?
HIPAA US Medical PG Practice Questions and MCQs
Question 1: On a Sunday afternoon, a surgical oncologist and his family attend a football game in the city where he practices. While at the game, he runs into a physician colleague that works at the same institution. After some casual small talk, his colleague inquires, "Are you taking care of Mr. Clarke, my personal trainer? I heard through the grapevine that he has melanoma, and I didn't know if you have started him on any chemotherapy or performed any surgical intervention yet. Hopefully you'll be able to take very good care of him." In this situation, the surgical oncologist may confirm which of the following?
A. The patient's name
B. The patient's diagnosis
C. The patient's treatment plan
D. Only that Mr. Clarke is his patient
E. No information at all (Correct Answer)
Explanation: *Incorrect: The patient's name*
- Confirming the patient's name would still be a breach of **confidentiality** under **HIPAA**, as it acknowledges the individual is a patient with the inquiring physician.
- Even if the name is already known to the colleague, confirming it from the treating physician implies an **established patient relationship**, which is PHI.
*Incorrect: The patient's diagnosis*
- Disclosing the patient's diagnosis is a direct violation of **HIPAA** rules, as it releases specific **protected health information** without the patient's explicit consent.
- This information is highly sensitive and directly related to the individual's health status, which must be kept confidential.
*Incorrect: The patient's treatment plan*
- Sharing details about the **treatment plan** is a clear breach of **patient privacy** and **HIPAA regulations**.
- This information is considered **protected health information (PHI)** and can only be shared with those directly involved in the patient's care or with patient consent.
*Incorrect: Only that Mr. Clarke is his patient*
- Even confirming that Mr. Clarke is a patient constitutes a breach of **confidentiality** and **HIPAA**.
- Acknowledging a patient-physician relationship is considered releasing **protected health information** because it implicitly confirms health services are being rendered to that individual.
***Correct: No information at all***
- Disclosure of any protected health information (PHI) to unauthorized individuals, even other healthcare professionals, is a violation of **HIPAA**.
- The colleague did not establish a **physician-patient relationship** with Mr. Clarke, nor did they have a legitimate need to know this information for treatment, payment, or healthcare operations.
- Without patient authorization or a legitimate purpose under the **Privacy Rule**, the surgical oncologist must not confirm any PHI, including the mere existence of a patient-physician relationship.
Question 2: A 17-year-old male, accompanied by his uncle, presents to a doctor with his arm in a sling. There is blood dripping down his shirt. He pleads with the physician to not report this injury to authorities, offering to pay extra for his visit, as he is afraid of retaliation from his rival gang. The physician examines the wound, which appears to be a stabbing injury to his left anterior deltoid. This case study in medical ethics asks: How should the physician best handle this patient's request?
A. Maintain confidentiality, as reporting stab wounds is not required
B. Breach confidentiality and discuss the injury with the uncle
C. Breach confidentiality and report the stab wound to the police (Correct Answer)
D. Maintain confidentiality and schedule a follow-up visit with the patient
E. Maintain confidentiality, as retaliation may result in greater harm to the patient
Explanation: ***Breach confidentiality and report the stab wound to the police***
- Physicians in the United States have a **mandatory reporting obligation** for injuries resulting from violent crimes, including stab wounds, regardless of the patient's wishes.
- **State laws** require reporting of suspected criminal activity involving weapons, and physicians are **legally protected** from liability when making good-faith mandatory reports.
- While the principle of **non-maleficence** is important, **legal duties** take precedence, and physicians cannot selectively choose when to comply with mandatory reporting laws based on patient circumstances.
- The physician should explain to the patient that reporting is required by law, provide compassionate care, and potentially connect the patient with **social services** or **law enforcement victim support** to address safety concerns.
*Maintain confidentiality, as retaliation may result in greater harm to the patient*
- While concern for patient safety is understandable, **mandatory reporting laws do not have exceptions** for fear of retaliation.
- Physicians who fail to report may face **professional discipline**, **civil liability**, and potentially **criminal penalties** depending on jurisdiction.
- The proper approach is to report as required while simultaneously working to ensure patient safety through appropriate **social work intervention** and **victim protection resources**.
*Maintain confidentiality and schedule a follow-up visit with the patient*
- Simply scheduling follow-up care while failing to report violates **mandatory reporting statutes** for violent injuries.
- This approach ignores the physician's **legal obligation** and could result in professional consequences.
- Follow-up care should be provided **in addition to**, not instead of, mandatory reporting.
*Maintain confidentiality, as reporting stab wounds is not required*
- This is **factually incorrect**; virtually all U.S. jurisdictions require reporting of injuries from violent crimes, particularly those involving weapons.
- Failure to report based on this misunderstanding could lead to **licensure sanctions** and legal liability.
*Breach confidentiality and discuss the injury with the uncle*
- The 17-year-old patient is a **minor**, but discussing details with the uncle without explicit consent or confirmed guardianship status is inappropriate.
- The uncle's presence does not automatically grant him **HIPAA authorization** to receive protected health information.
- The correct action is to report to **appropriate authorities** (police), not to involve family members without proper consent or legal authority.
Question 3: A 42-year-old woman presents to the physician with symptoms of vague abdominal pain and bloating for several months. Test results indicate that she has ovarian cancer. Her physician attempts to reach her by phone multiple times but cannot reach her. Next of kin numbers are in her chart. According to HIPAA regulations, who should be the primary person the doctor discusses this information with?
A. The patient's brother
B. The patient's husband
C. The patient's daughter
D. All of the options
E. The patient (Correct Answer)
Explanation: ***The patient***
- Under **HIPAA**, the patient has the **right to privacy** regarding their protected health information (PHI). Therefore, the physician must make all reasonable attempts to contact the patient directly to convey their diagnosis.
- Sharing sensitive medical information like a cancer diagnosis with anyone other than the patient, without their explicit consent, would be a **violation of HIPAA regulations**.
*The patient's brother*
- The patient's brother is not automatically authorized to receive her medical information, even if listed as **next of kin**, without the patient's explicit consent or a documented **healthcare power of attorney**.
- Discussing the diagnosis with the brother without the patient's direct consent would be a **breach of patient confidentiality**.
*The patient's husband*
- Even a spouse does not automatically have the right to access a patient's **PHI** without the patient's express permission, according to **HIPAA**.
- While often a trusted contact, without explicit consent, revealing the diagnosis to the husband would still violate the patient's **privacy rights**.
*The patient's daughter*
- Similar to other family members, the patient's daughter is not legally entitled to receive her mother's confidential medical information without explicit authorization or a medical **power of attorney**.
- The physician's primary responsibility is to the patient herself, ensuring her **privacy** is maintained.
*All of the options*
- According to **HIPAA**, sharing the patient's diagnosis with any family member without her explicit consent would be a **breach of confidentiality**.
- This option incorrectly assumes that **next of kin** automatically have the right to receive sensitive medical information.
Question 4: A 62-year-old man comes to his primary care physician with a 3-month history of insomnia and severe work anxiety. He says that he is unable to retire because he has no financial resources; however, the stress level at his work has been causing him to have worsening performance and he is afraid of being fired. He thinks that he would be able to resume work normally if he was able to decrease his level of anxiety. His physician prescribes him a trial 1-month regimen of benzodiazepine therapy and schedules a follow-up appointment to see whether this treatment has been effective. Three weeks later, the patient's wife calls and says "My husband was fired from work and it's your fault for prescribing that medication! I know he must have been taking too much of that drug. Don't you know that he had a horrible problem with drug abuse in his 30s?" Which of the following is the most appropriate first action for the physician to take?
A. Discharge the patient for inappropriate use of medication
B. Contact the physician's medical practice insurance company regarding a potential claim
C. Refer the patient to a substance abuse program
D. Contact the patient directly to discuss the situation (Correct Answer)
E. Inform the patient's wife that patient information cannot be disclosed to her due to HIPAA
Explanation: ***Contact the patient directly to discuss the situation***
- The physician's immediate priority is to address the patient's well-being and medication use directly with the patient, as the patient-doctor relationship is paramount and confidential.
- This allows the physician to gather information directly from the patient, assess the current situation, and plan appropriate next steps, which may include medication adjustment, referral, or relapse prevention depending on the patient's account.
*Discharge the patient for inappropriate use of medication*
- Discharging the patient based solely on a third-party report, especially without direct communication with the patient, would be premature and could be interpreted as **patient abandonment**.
- This action does not prioritize the patient's immediate medical and psychological needs and could worsen their situation by removing them from care.
*Contact the physician's medical practice insurance company regarding a potential claim*
- While potential legal implications exist, contacting the insurance company is not the **first and most appropriate medical action** to take.
- The immediate priority is the patient's health and safety, and managing potential legal risks can be addressed after ensuring the patient's well-being.
*Refer the patient to a substance abuse program*
- Although the patient's history and the wife's concerns suggest a potential for substance abuse, a direct referral without first assessing the patient and confirming misuse would be premature.
- The physician needs to **personally evaluate the patient** to determine the appropriate course of action, which might include such a referral, but it shouldn't be the very first step based on indirect information.
*Inform the patient's wife that patient information cannot be disclosed to her due to HIPAA*
- While the physician can listen to the wife's concerns (HIPAA does not prohibit receiving information from third parties), the physician **cannot discuss the patient's care or confirm treatment details** without the patient's authorization.
- However, simply informing the wife about confidentiality restrictions without taking action to contact and assess the patient is not the most appropriate first step—the priority is patient care, not just explaining privacy rules.
Question 5: A 32-year-old man visits a clinic for routine health check-up. He discloses having an extramarital relationship several months ago and requests screening for sexually transmitted infections. One week later, his fourth-generation HIV antibody and antigen test returns positive. After appropriate counseling about the diagnosis, the patient explicitly requests that his HIV status not be disclosed to anyone, including his wife. The patient's wife is also registered as a patient at the same clinic. According to US medical ethics and patient confidentiality laws, what is the most appropriate next step for the physician?
A. Inform the wife immediately of the positive result
B. Schedule a group meeting with the patient and wife to disclose the results
C. Wait for one week before you disclose the results to his wife
D. Report the infection to the national health authorities
E. Offer the patient repeat antibody testing to confirm results (Correct Answer)
Explanation: ***Offer the patient repeat antibody testing to confirm results***
- Before taking any steps regarding disclosure or partner notification, **confirming the diagnosis with repeat testing is essential**, especially since fourth-generation tests can have false positives.
- According to **CDC guidelines**, a reactive HIV screening test (antigen/antibody combination test) should be followed by **confirmatory testing** with HIV-1/HIV-2 antibody differentiation assay and potentially HIV-1 RNA testing.
- Once confirmed, the physician should engage in **ongoing counseling** about the importance of disclosing to sexual partners while maintaining confidentiality unless permitted by state law or the patient consents.
- The physician can offer **voluntary partner notification services** through the health department for anonymous notification.
*Inform the wife immediately of the positive result*
- Under **HIPAA and medical ethics**, directly informing the wife without patient consent is a **breach of confidentiality** and violates federal privacy laws.
- While some states have exceptions allowing disclosure to identifiable third parties at risk, this is **not the first step** and requires careful legal review.
- The physician's primary duty is to maintain confidentiality while counseling the patient.
*Schedule a group meeting with the patient and wife to disclose the results*
- Arranging a joint disclosure session without the patient's **explicit consent** violates confidentiality principles.
- While the physician should **encourage** the patient to disclose to his wife, forcing or arranging disclosure without consent is inappropriate.
- The physician should offer support for voluntary disclosure but cannot mandate it.
*Wait for one week before you disclose the results to his wife*
- Delaying disclosure does not change the ethical and legal requirement for **patient consent**.
- Unilateral disclosure to the wife, regardless of timing, remains a **HIPAA violation** and breach of medical ethics.
- The appropriate approach is ongoing counseling and offering partner notification services, not unauthorized disclosure.
*Report the infection to the national health authorities*
- HIV is a **nationally notifiable disease** to the CDC, but reporting is done with **de-identified or limited identifiers** for surveillance purposes, not with full patient details that would breach confidentiality.
- Mandatory reporting to public health authorities is **separate from partner notification** and does not resolve the ethical dilemma regarding spousal disclosure.
- This reporting does not substitute for confirming the diagnosis first.
Question 6: A 68-year-old man presents to the physician for a follow-up examination, accompanied by his spouse. Two years ago, he was diagnosed with localized prostate cancer, for which he underwent radiation therapy. He was recently diagnosed with osteoblastic metastases to the spine and is scheduled to initiate physical therapy next week. In private, the patient’s spouse says that he has been losing weight and wetting the bed, and she tearfully asks the physician if his prostate cancer has returned. She says that her husband has not spoken to her about his health recently. The patient has previously expressed to the physician that he does not want his spouse to know about his condition because she “would worry too much”. Which of the following initial statements by the physician is most appropriate?
A. “Sorry, but because your husband’s condition is not classified as a notifiable disease, I’m not permitted to discuss his medical information with you without first obtaining his consent.”
B. It concerns me that he's not speaking openly with you. I recommend that you seek medical power of attorney for your husband. Then, we can legally discuss his diagnosis and treatment options together.
C. “Your husband is very ill and may not want you to know the details. I can imagine it's frustrating for you, but you have to respect his discretion.”
D. I'm sorry, I can't discuss any information with you without his permission. I recommend that you have an open discussion with your husband. (Correct Answer)
E. “It’s difficult to deal with couples who are aging, but I have experience helping families cope. We should sit down with your husband and discuss this situation together.”
Explanation: ***"I'm sorry, I can't discuss any information with you without his permission. I recommend that you have an open discussion with your husband."***
- This response appropriately upholds **patient confidentiality** as the patient has explicitly stated he does not want his spouse to know details of his condition.
- It also encourages open communication between the patient and his spouse, which can ultimately lead to better support and understanding.
*"Sorry, but because your husband's condition is not classified as a notifiable disease, I'm not permitted to discuss his medical information with you without first obtaining his consent."*
- While patient consent is crucial, framing it around "notifiable disease" is irrelevant and implies that only **notifiable diseases** warrant confidentiality exceptions, which is incorrect. All patient information is confidential.
- The phrasing is overly formal and may sound dismissive, potentially alienating the distressed spouse.
*"It concerns me that he's not speaking openly with you. I recommend that you seek medical power of attorney for your husband. Then, we can legally discuss his diagnosis and treatment options together."*
- Recommending a **medical power of attorney** is premature and potentially adversarial, especially since the patient has not been deemed incapacitated.
- It bypasses the patient's current capacity to make decisions and his stated wish for privacy, which is a breach of his autonomy.
*"Your husband is very ill and may not want you to know the details. I can imagine it's frustrating for you, but you have to respect his discretion."*
- This statement is judgmental and dismissive of the spouse's distress, potentially damaging the physician-family relationship.
- It offers little constructive advice or support, simply stating the obvious without facilitating a path towards better communication or understanding.
*"It's difficult to deal with couples who are aging, but I have experience helping families cope. We should sit down with your husband and discuss this situation together."*
- While "sitting down together" can be a good approach, the initial comment about "difficult to deal with couples who are aging" is unprofessional and condescending.
- The physician should facilitate communication without blaming or making generalizations about aging couples, and must prioritize the patient's expressed wishes for privacy first.
Question 7: An 86-year-old male is admitted to the hospital under your care for management of pneumonia. His hospital course has been relatively uneventful, and he is progressing well. While making morning rounds on your patients, the patient's cousin approaches you in the hallway and asks about the patient's prognosis and potential future discharge date. The patient does not have an advanced directive on file and does not have a medical power of attorney. Which of the following is the best course of action?
A. Direct the cousin to the patient's room, telling him that you will be by within the hour to discuss the plan.
B. Explain that you cannot discuss the patient's care without explicit permission from the patient themselves. (Correct Answer)
C. Provide the cousin with the patient's most recent progress notes and a draft of his discharge summary.
D. Explain that the patient is progressing well and should be discharged within the next few days.
E. Refer the cousin to ask the patient's wife about these topics.
Explanation: ***Explain that you cannot discuss the patient's care without explicit permission from the patient themselves.***
- This is the **correct ethical and legal action** in healthcare to maintain patient confidentiality, as the patient has not designated a medical power of attorney or filed an advance directive.
- The **Health Insurance Portability and Accountability Act (HIPAA)** protects patient health information, requiring explicit patient consent before disclosure to anyone, including family members, unless specific exceptions apply (e.g., immediate threat to safety, treatment purposes directly).
*Direct the cousin to the patient's room, telling him that you will be by within the hour to discuss the plan.*
- While ultimately the patient needs to be involved, directly discussing **private health information** with the cousin without the patient's consent first is a breach of **confidentiality**.
- This approach prematurely assumes the patient will grant permission or wishes for this specific family member to be involved, which might not be true.
*Provide the cousin with the patient's most recent progress notes and a draft of his discharge summary.*
- This action represents a clear and significant **breach of patient confidentiality** and **HIPAA regulations**.
- Without explicit patient consent, sharing detailed medical records with anyone, including family, is strictly prohibited.
*Explain that the patient is progressing well and should be discharged within the next few days.*
- Even a general statement about the patient's condition and discharge plans can be considered a **breach of confidentiality** under HIPAA.
- Such information, while seemingly innocuous, reveals that the individual is indeed a patient and implies details about their health status, which requires patient consent to disclose.
*Refer the cousin to ask the patient's wife about these topics.*
- There is no information provided that the **patient's wife** has legal authority (e.g., **medical power of attorney**) or explicit permission from the patient to discuss his medical information.
- Referring the cousin to the wife without verifying her authority could lead to further breaches of **confidentiality** if the wife is not authorized to share such details.
Question 8: A 27-year-old woman presents with painful urination and malodorous urethral discharge. She states she has a single sexual partner and uses condoms for contraception. The patient's blood pressure is 115/80 mm Hg, the heart rate is 73/min, the respiratory rate is 14/min, and the temperature is 36.6℃ (97.9℉). Physical examination shows swelling and redness of the external urethral ostium. There is a yellowish, purulent discharge with an unpleasant odor. The swab culture grows N. gonorrhoeae. The doctor explains the diagnosis to the patient, and they discuss the importance of notifying her partner. The patient says she doesn't want her partner to know about her diagnosis and begs the doctor to not inform the health department. She is anxious that everybody will find out that she is infected and that her partner will leave her. She promises they will use barrier contraception while she is treated. Which of the following is the most appropriate course of action?
A. Let the patient do as she suggests, because it is her right not to disclose her diagnosis to anyone.
B. Tell the patient that she is required to tell her partner and stress the consequences of untreated gonorrhea in her partner.
C. Refer to the medical ethics committee for consultation.
D. Encourage her to tell her partner because it is a way to protect her partner from possible complications, and reassure her that the confidence will only be shared with her partner.
E. Explain to the patient that gonorrhea is a mandatory reported disease. (Correct Answer)
Explanation: ***Explain to the patient that gonorrhea is a mandatory reported disease.***
- **Gonorrhea** is a **nationally notifiable disease**, meaning healthcare providers are **legally required by state and local public health laws** to report cases to public health authorities. This reporting is crucial for **disease surveillance**, contact tracing, and public health control.
- While respecting patient confidentiality is paramount, **state public health statutes mandate reporting** of sexually transmitted infections like gonorrhea. HIPAA explicitly **permits disclosure to public health authorities** for disease control purposes without requiring patient consent.
- The physician should explain this legal obligation to the patient while maintaining a supportive, non-judgmental approach to preserve the therapeutic relationship.
*Let the patient do as she suggests, because it is her right not to disclose her diagnosis to anyone.*
- While patient autonomy and confidentiality are crucial, the **public health implications** of a sexually transmitted infection (STI) like gonorrhea mean that disclosure to public health authorities for contact tracing is legally mandated in the United States.
- Allowing the patient to withhold this information from public health authorities could lead to **further transmission** and potential severe health consequences for her partner and community, contradicting the physician's ethical and legal duty to prevent harm.
*Tell the patient that she is required to tell her partner and stress the consequences of untreated gonorrhea in her partner.*
- The patient is **not legally required** to inform her partner directly; rather, the **physician is required to report to public health authorities**, who then handle partner notification through confidential processes.
- While educating the patient about the **risks of untreated gonorrhea** in her partner is important, directing her to notify her partner herself could be perceived as coercive and may damage the patient-physician relationship without ensuring compliance.
*Refer to the medical ethics committee for consultation.*
- While ethical dilemmas can warrant committee consultation, the reporting of **notifiable diseases** like gonorrhea is typically governed by clear legal statutes and public health regulations, making a consultation unnecessary for this specific issue.
- Referring to an ethics committee would delay crucial public health interventions, such as **partner notification** and contact tracing, which are time-sensitive for preventing further spread of the infection.
*Encourage her to tell her partner because it is a way to protect her partner from possible complications, and reassure her that the confidence will only be shared with her partner.*
- Encouraging disclosure is good practice, but reassuring her that confidence will "only" be shared with her partner is **misleading and incorrect**, as the physician is legally obligated to report gonorrhea to the health department.
- This approach fails to address the mandatory reporting requirement, potentially placing the physician in a difficult ethical and legal position and violating public health law.
Question 9: A 54-year-old man suffered an anterior wall myocardial infarction that was managed in the cath lab with emergent coronary stenting and revascularization. The patient states that his wife, adult children, and cousins may be disclosed information regarding his care and health information. The patient has been progressing well without any further complications since his initial catheterization. On hospital day #3, a woman stops you in the hall outside of the patient's room whom you recognize as the patient's cousin. She asks you about the patient's prognosis and how the patient is progressing after his heart attack. Which of the following is the most appropriate next step?
A. Decline to comment per HIPAA patient confidentiality regulations
B. Direct the woman to discuss these issues with the patient himself
C. Ask the patient if it is acceptable to share information with this individual
D. Discuss the patient's hospital course and expected prognosis with the woman
E. Ask for identification confirming that the woman is truly the patient's cousin (Correct Answer)
Explanation: ***Ask for identification confirming that the woman is truly the patient's cousin***
- While **HIPAA** emphasizes patient privacy, it also allows disclosure to family members if the patient has agreed to it or if disclosure is deemed in the patient's best interest.
- The patient explicitly stated that his cousins may be disclosed information; therefore, confirming the woman's identity as a cousin is the most **appropriate first step** to determine if she is one of the individuals he approved for information disclosure.
*Decline to comment per HIPAA patient confidentiality regulations*
- This is an overly broad and potentially **unnecessary response**, as the patient has already indicated that his cousins can receive information.
- **HIPAA allows for disclosure** to family members or others involved in the patient's care if the patient expresses a preference or does not object.
*Direct the woman to discuss these issues with the patient himself*
- This option **shifts the responsibility** of disclosure from the healthcare provider, who holds the medical information, to the patient.
- While the patient can certainly share his own information, the family may be seeking **professional medical updates** that the patient might not be fully equipped to provide.
*Ask the patient if it is acceptable to share information with this individual*
- Although obtaining direct patient consent is generally a good practice, the patient has already **verbally authorized family members**, including cousins, to receive information.
- The primary outstanding issue is confirming this specific individual's relationship to the patient, rather than re-asking for permission to share with cousins in general.
*Discuss the patient's hospital course and expected prognosis with the woman*
- This action would be **premature and a violation of HIPAA** if the woman cannot be confirmed as the patient's cousin.
- **Verification of identity** and relationship is crucial before disclosing any protected health information.
Question 10: An 86-year-old man is admitted to the hospital for management of pneumonia. His hospital course has been relatively uneventful, and he is progressing well. On morning rounds nearing the end of the patient's hospital stay, the patient's cousin finally arrives to the hospital for the first time after not being present for most of the patient's hospitalization. He asks about the patient's prognosis and potential future discharge date as he is the primary caretaker of the patient and needs to plan for his arrival home. The patient is doing well and can likely be discharged in the next few days. Which of the following is the most appropriate course of action?
A. Bring the cousin to the room and explain the plan to both the patient and cousin
B. Explain the plan to discharge the patient in the next few days
C. Explain that you cannot discuss the patient's care at this time
D. Tell the cousin that you do not know the patient's course well
E. Bring the cousin to the room and ask the patient if it is acceptable to disclose his course (Correct Answer)
Explanation: ***Bring the cousin to the room and ask the patient if it is acceptable to disclose his course***
- This option prioritizes **patient autonomy** and privacy by allowing the patient to decide if their medical information can be shared with the cousin.
- Even if the cousin is the primary caretaker, explicit permission from the patient is required under **HIPAA** rules before disclosing protected health information.
- This approach balances **confidentiality protection** with practical discharge planning needs.
*Bring the cousin to the room and explain the plan to both the patient and cousin*
- This option prematurely assumes the patient's consent to share information with the cousin, which may violate **patient privacy**.
- While it facilitates communication, it bypasses the critical step of confirming the patient's willingness to disclose their medical details.
- This constitutes a **HIPAA violation** by disclosing information before obtaining consent.
*Explain the plan to discharge the patient in the next few days*
- Disclosing this information solely to the cousin without the patient's explicit permission constitutes a **breach of confidentiality**.
- This action violates **HIPAA regulations**, even if the cousin is identified as the primary caretaker.
- Protected health information (PHI) cannot be shared with family members without patient authorization.
*Explain that you cannot discuss the patient's care at this time*
- While protecting patient privacy, this response is overly abrupt and unhelpful, potentially creating **frustration** and hindering discharge planning.
- It does not offer a constructive path toward obtaining consent or addressing the cousin's legitimate concerns as a caretaker.
- A better approach involves facilitating consent rather than simply refusing communication.
*Tell the cousin that you do not know the patient's course well*
- This statement is **untruthful** and unprofessional, as the physician on rounds is expected to be knowledgeable about their patient's condition.
- It undermines trust and misrepresents the physician's duty to provide accurate information when appropriate.
- Dishonesty is never an acceptable approach to navigating privacy concerns.
Question 11: A 26-year-old man comes to the emergency department because of a 1-week history of fever, throat pain, and difficulty swallowing. Head and neck examination shows an erythematous pharynx with purulent exudates overlying the palatine tonsils. Microscopic examination of a throat culture shows pink, spherical bacteria arranged in chains. Treatment with amoxicillin is initiated. A day later, a physician colleague from another department approaches the physician in the lobby of the hospital and asks about this patient, saying, "Did you see him? What does he have? He's someone I play football with and he hasn't come to play for the past 5 days. I'm worried about him." Which of the following is the most appropriate action by the physician?
A. Inform the colleague that they should ask the patient's attending physician
B. Inform the colleague that they cannot divulge any information about the patient (Correct Answer)
C. Tell the colleague the patient's case file number so they can look it up themselves
D. Tell the colleague that they cannot tell them the diagnosis but that their friend was treated with antibiotics
E. Ask the colleague to meet in the office so they can discuss the patient in private
Explanation: ***Inform the colleague that they cannot divulge any information about the patient***
- The **Health Insurance Portability and Accountability Act (HIPAA)** strictly prohibits the disclosure of a patient's **Protected Health Information (PHI)** without their explicit consent.
- Even if the inquirer knows the patient, a physician-patient relationship creates a **duty of confidentiality** that supersedes personal acquaintance.
- Disclosing any information without patient consent, even to another physician, violates HIPAA regulations.
*Tell the colleague the patient's case file number so they can look it up themselves*
- Providing the case file number would enable unauthorized access to the patient's medical records, thereby violating **patient confidentiality** and **HIPAA regulations**.
- This action does not rectify the breach of confidentiality and escalates the potential for further misuse of PHI.
*Inform the colleague that they should ask the patient's attending physician*
- Recommending that the colleague ask the attending physician shifts the burden but does not address the underlying ethical and legal obligation of the current physician to maintain **confidentiality**.
- The attending physician would also be bound by **HIPAA** and ethical guidelines not to disclose information without consent.
*Tell the colleague that they cannot tell them the diagnosis but that their friend was treated with antibiotics*
- While seemingly less specific, stating that the friend was treated with **antibiotics** is still a disclosure of **Protected Health Information (PHI)**.
- This action violates **patient confidentiality** as it reveals a detail of the patient's medical management without consent.
*Ask the colleague to meet in the office so they can discuss the patient in private*
- Moving to a private setting does not negate the fact that discussing the patient's information with an unauthorized individual is a **breach of confidentiality**.
- The location of the conversation does not change the ethical and legal obligations to protect **PHI**.
Question 12: A 45-year-old man is brought to the emergency department by his friends because of a 1-hour history of shortness of breath and squeezing chest pain. They were at a party where cocaine was consumed. A diagnosis of acute myocardial infarction is made. The physician stabilizes the patient and transfers him to the inpatient unit. Six hours later, his wife arrives at the emergency department and requests information about her husband's condition. Which of the following is the most appropriate action by the physician?
A. Ask the wife for a marriage certificate
B. Inform the wife about her husband's condition
C. Consult the hospital ethics committee
D. Obtain authorization from the patient to release information (Correct Answer)
E. Request the patient's durable power of attorney document
Explanation: ***Obtain authorization from the patient to release information***
- Under **HIPAA (Health Insurance Portability and Accountability Act)**, patient information is confidential and cannot be shared without their express consent, even with close family members like a spouse, once the patient is **conscious and able to make decisions**.
- The patient, being stabilized, is likely **competent** to authorize the release of his medical information to his wife, ensuring his **autonomy** and privacy are respected.
*Ask the wife for a marriage certificate*
- A marriage certificate does not automatically grant access to a spouse's medical information if the patient is **competent** and has not provided consent.
- Requesting such documentation is generally **not standard practice** and does not supersede the need for patient authorization under HIPAA.
*Inform the wife about her husband's condition*
- Releasing medical information without the patient's explicit consent would be a direct **violation of patient confidentiality** and **HIPAA regulations**, even if the individual is a spouse.
- Although well-intentioned, this action could have legal and ethical repercussions for the physician and the hospital.
*Consult the hospital ethics committee*
- While ethics committees handle complex ethical dilemmas, this situation is a straightforward matter of **patient confidentiality** and **HIPAA compliance**.
- The direct course of action is to seek patient authorization, rather than escalating to an ethics committee for a clearly defined privacy issue.
*Request the patient's durable power of attorney document*
- A **durable power of attorney (DPOA)** for healthcare is only activated when a patient is **incapacitated** and unable to make decisions for themselves.
- Since the patient is stabilized and presumably competent to make decisions about his care, a DPOA is not relevant at this time.
Question 13: An otherwise healthy 67-year-old woman comes to your clinic after being admitted to the hospital for 2 weeks after breaking her hip. She has not regularly seen a physician for the past several years because she has been working hard at her long-time job as a schoolteacher. You wonder if she has not been taking adequate preventative measures to prevent osteoporosis and order the appropriate labs. Although she is recovering from surgery well, she is visibly upset because she is worried that her hospital bill will bankrupt her. Which of the following best describes her Medicare coverage?
A. Medicare Part C will cover the majority of drug costs during her inpatient treatment.
B. Medicare Part A will cover the majority of her hospital fees, including inpatient drugs and lab tests. (Correct Answer)
C. Medicare is unlikely to cover the cost of her admission because she has not been paying her premium.
D. Medicare Part B will cover the majority of her hospital fees, including inpatient drugs and lab tests.
E. Medicare Part D will cover the cost of drugs during her inpatient treatment.
Explanation: ***Medicare Part A will cover the majority of her hospital fees, including inpatient drugs and lab tests.***
* **Medicare Part A** is hospital insurance and covers **inpatient hospital stays**, skilled nursing facility care, hospice care, and some home health care. This includes services received during an inpatient stay such as drugs, lab tests, and surgery.
* Given her 2-week hospital stay for a broken hip, which resulted in surgery and ongoing recovery, Part A would be the primary payer for the majority of these costs.
*Medicare Part C will cover the majority of drug costs during her inpatient treatment.*
* **Medicare Part C**, also known as **Medicare Advantage**, is an alternative to original Medicare provided by private companies, often including Part A, B, and D benefits.
* While Part C plans can cover drug costs, **inpatient drugs** administered during a hospital stay are typically covered under **Part A**, not a separate drug plan, if the patient is using original Medicare. If she has a Part C plan, it would integrate these benefits.
*Medicare is unlikely to cover the cost of her admission because she has not been paying her premium.*
* Medicare Part A is generally **premium-free** for most individuals who have paid Medicare taxes through their employment for at least 10 years (or 40 quarters).
* Given her long career as a schoolteacher, it is highly likely she would qualify for premium-free Part A, making this statement incorrect.
*Medicare Part B will cover the majority of her hospital fees, including inpatient drugs and lab tests.*
* **Medicare Part B** is medical insurance and covers **doctor's services**, outpatient care, medical supplies, and preventive services.
* While it covers some outpatient lab tests and physician services received during an inpatient stay, it does not cover the primary costs of **inpatient hospital fees** or drugs administered during an inpatient stay, which fall under Part A.
*Medicare Part D will cover the cost of drugs during her inpatient treatment.*
* **Medicare Part D** is prescription drug coverage provided by private companies and covers **outpatient prescription drugs**.
* Medications administered to an **inpatient** during a hospital stay (i.e., when she is admitted) are typically covered under **Medicare Part A**, not Part D.
