Which of the following actions would breach patient confidentiality?

• A. Discussing patient care in the cafeteria with other nurses not involved
• B. Accessing a patient’s chart with proper authorization
• C. Posting identifiable patient information on a public website
• D. Sharing non-identifying information with a colleague

Answer: (C)

Respecting patient confidentiality means keeping identifiable health information private and sharing it only with people who have a legitimate need to know for the patient’s care and with proper authorization.

Posting identifiable patient information on a public website intrudes into the patient’s privacy in a way that is publicly accessible and not limited to those who need to know. This is the clearest example of a breach because it removes any control over who can see the sensitive details and can expose the patient to harm, stigma, or discrimination, and it likely violates legal protections like HIPAA.

Accessing a patient’s chart with proper authorization is part of providing care; as long as access is limited to those who need the information for treatment, payment, or operations and is authenticated, it’s not a breach.

Sharing non-identifying information with a colleague is typically permissible when the data cannot identify the patient and is necessary for care, coordination, or education. It should always be done with care to ensure no identifiers slip through and that privacy safeguards remain in place.

Discussing patient care in the cafeteria with other nurses not involved in the patient’s care is also a confidentiality risk because it occurs in a public or semi-public setting where unauthorized individuals could overhear sensitive information. The key is to keep discussions restricted to private, appropriate venues and to limit details to what’s necessary and non-identifying when possible.