Ethics & Law · patient case question
Who may access a patient's health information directly, without specific authorisation?
Patient case: Trauma, pigmented lesions, anaesthetics and confidentiality
Scenario: Four items.
Show answer and explanation
Correct answer: C. Staff members involved in that patient's treatment, payment or operations
- A. An accompanying friend or neighbour has no right of access at all.
- B. Another provider may receive information for treatment purposes, but not open access to the record for the asking.
- C. Correct. Under HIPAA, use and disclosure for treatment, payment and health care operations is permitted without separate authorisation — but only on a minimum-necessary basis, for staff genuinely involved in that patient's care.
- D. A spouse has no automatic right of access. Authorisation is required unless the patient is present and does not object, or lacks capacity.