Which practice protects patient privacy when accessing records on a shared unit?

• A. Share login credentials with colleagues
• B. Leave terminal unlocked when stepping away
• C. Access only records for patients in your care
• D. Access any patient record when needed

Answer: (C)

Access should be limited to the records of patients you are directly caring for. This protects confidentiality by ensuring clinicians only see information necessary for patient care, which is the essence of the need-to-know and least-privilege principles in healthcare IT. When you access only the records of your own patients, you minimize unnecessary exposure on a shared unit and maintain trust, accountability, and compliance with privacy laws and organizational policies.

Sharing login credentials, leaving a workstation unlocked, or accessing records for any patient as needed all undermine privacy and security. They create opportunities for inappropriate disclosure, make it hard to track who viewed which information, and violate policy and ethical standards. If you have a legitimate need to access a different patient’s record, follow proper procedures and obtain authorization through the appropriate channels.