Patient Privacy Basics (HIPAA)

Protected health information is any information about a patient's health, care or payment that can identify them. That includes:

• Name, address, birth date, phone number
• Diagnoses, medicines, test results and notes
• Photos of the patient or their wounds
• Room numbers when paired with health details

It is protected on paper, on a screen and in conversation.

Look at, use and share only what you need to do your job.

• Open the records of the patients you care for, not others out of curiosity, including family, friends, coworkers or famous patients
• Share details with the care team that needs them, not with everyone on the unit
• Talk about patients in private, not in hallways, elevators or break rooms

• Lock your screen when you walk away, and never share your password
• Do not take photos of patients or records on your personal phone
• Never post about a patient online, even without a name. Details can still identify them
• Keep paper records out of sight and shred them, never toss them in the trash
• In a patient's home, keep notes and devices with you, not left in the open

Mistakes happen: a record sent to the wrong fax, a lost phone, a conversation overheard.

Report it to your supervisor or privacy officer right away, the same day. Do not try to fix it quietly. Quick reporting lets the facility limit the harm and meet its legal duty to notify.

Reporting in good faith is expected and protected.