Common Mistakes: Protecting Patient Privacy Under HIPAA
These are the specific ways this task goes wrong on the job — not hypothetical edge cases, but patterns that cause real documentation errors, billing problems, or patient safety issues.
Discussing a patient's visit with a coworker in the hallway or break room where other patients can overhear.
Giving information to a caller claiming to be a family member without verifying the patient has actually authorized that disclosure.
Leaving a workstation unlocked and a patient's chart open on screen while stepping away "just for a minute."
Looking up a friend's, relative's, or coworker's chart out of curiosity when it has nothing to do with your job duties — this is a HIPAA violation regardless of intent.
How the Quality Checkpoints Prevent These
Every mistake above is caught by one of this task's quality checkpoints — the habit of checking these consistently is what actually prevents the error, not just knowing it exists.
- ✓
Only the minimum necessary information is accessed or shared for the task at hand.
- ✓
Caller identity and authorization are verified before any patient information is shared by phone.
- ✓
Workstations are locked whenever unattended, even for a short absence.
- ✓
Suspected breaches are reported promptly, not handled informally or ignored.
Practice the written exam too
The knowledge behind every task is tested in the written CMA exam. 500+ free questions.
Take the Practice Test →