The nurse case manager's office is in a cluster of offices that share a fax machine. Which action by the nurse ensures that HIPAA requirements are met?

Question

1. Have the client sign a consent form for information to be released.
2. Have sending agencies call ahead before any information is sent.
3. Do not utilize the fax machine; depend on the mail system.
4. Take relevant information over the phone.

Answer 1

Correct Answer: 2
Rationale 1: Signing a consent form for information to be released is necessary to share information, but this would not ensure the privacy aspect of HIPAA—only the disclosure aspect.
Rationale 2: Case manager nurses need to maintain vigilance to protect the privacy of client health care information when sending and receiving messages. In this case, having the sending agency call prior to faxing information would alert the nurse to collect the information from the fax machine at the time it is received, securing that information so others do not have access to it.
Rationale 3: Sending information through the mail takes time and does not ensure the privacy of the information.
Rationale 4: Phone conversations and information taken during the conversation must be protected and taken in a secured way to ensure HIPAA privacy aspects have not been breached.