Accessing the health record of a client on another unit who is not under the nurse's direct care violates privacy regulations. Which option reflects this violation?

• A. Reviewing the discharge summary from a client's previous hospitalization
• B. Obtaining x-ray findings from a client's emergency room visit
• C. Reviewing the health record of a client on another unit with similar symptoms
• D. Asking a family member to view the chart

Answer: (D)

Confidentiality of health information and need-to-know access is the guiding idea. Health data should be shared only with people who are authorized to see it or who are directly involved in the patient’s care, and only with the patient’s consent or designated personal representative.

This option shows a direct breach: asking a family member to view the chart. That involves disclosing protected health information to someone who isn’t authorized to access the record unless the patient has explicitly designated that person as a personal representative and provided consent. When PHI is shared with an external person like a family member without that authorization, it violates privacy regulations.

The other scenarios can be appropriate within the care environment if the nurse has legitimate access and a care-related need to know for the patient’s treatment, or if the patient has provided proper authorization.