Question

question 62

a pharmacy technician is ensuring hipaa compliance when processing a prescription. under hipaa, which of the following actions is permissible without patient authorization?

sharing the patients phi with a family member who is not the patients legal representative.
disclosing the patients information to another treating healthcare provider.
sharing the patients medication history with their employer.
providing the patients prescription information to their attorney.

Explanation:

Identify the core legal standard

Using the HIPAA Privacy Rule knowledge point

The Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule regulates the use and disclosure of Protected Health Information (PHI). Under the rule, covered entities can use and disclose PHI without patient authorization for Treatment, Payment, and Healthcare Operations (TPO).

Evaluate the options against TPO exceptions

Using the HIPAA Privacy Rule knowledge point

• Option 1: Sharing PHI with a family member who is not a legal representative requires patient consent or an opportunity to object.
• Option 2: Disclosing information to another treating healthcare provider falls directly under the Treatment exception of TPO, making it permissible without written authorization.
• Option 3: Sharing medication history with an employer requires explicit, written patient authorization.
• Option 4: Providing prescription information to an attorney requires patient authorization or a formal subpoena/court order.

Answer:

• Sharing the patient's PHI with a family member who is not the patient's legal representative.
• Disclosing the patient's information to another treating healthcare provider. (Correct answer)
• Sharing the patient's medication history with their employer.
• Providing the patient's prescription information to their attorney.