Which action demonstrates appropriate confidentiality when accessing patient records?

• A. Access the patient record only for patients under your care
• B. Access any patient chart as needed
• C. Share login credentials with colleagues
• D. Access from a public terminal

Answer: (A)

Protecting patient privacy hinges on giving access only to information needed to care for a specific patient. This means using the need-to-know principle and the least privilege approach: you should view records only for patients you are actively caring for and only to perform tasks related to their care, documentation, or coordination.

Accessing a patient record only for patients under your care demonstrates this principle in action. It minimizes unnecessary exposure of PHI (protected health information) and helps ensure that you aren’t browsing or handling records unrelated to your duties. It also supports accountability, since access can be tracked to your role and patient.

In contrast, viewing any patient chart as needed grants broader access than necessary, increasing the risk of privacy breaches. Sharing login credentials bypasses security controls and audit trails, creating a large security vulnerability. Accessing records from a public terminal risks others viewing sensitive information and violates secure handling standards. Keeping access tightly restricted to necessary cases protects patient trust and complies with privacy regulations.