A nurse is instructed not to copy a patient's electronic health records to take home to finish a care plan. Which response is appropriate?

• A. Be sure to remove the client's name from the record.
• B. Client information should remain in the hospital.
• C. Be sure to shred copies of documents when you bring them back to the hospital.
• D. Be sure to copy the documents for home use.

Answer: (B)

Protecting patient privacy and PHI is the central idea. Electronic health records contain sensitive information, and it must stay within the hospital’s secure systems. Taking copies home creates a real risk of loss or unauthorized access, which violates privacy laws and hospital policies. The appropriate response is that client information should remain in the hospital, accessible only through approved, secure processes. If you need to work on the care plan, use the hospital’s secure workstations or approved remote access methods rather than transporting data offsite.

Removing the patient’s name or shredding copies after bringing them back doesn’t address the fundamental risk of carrying PHI out of the facility, and copying documents for home use directly violates privacy rules.