hipaa.systems
Free training episode · clinicians · about 7 minutes · no sign-up

Between patients One break. Six decisions.

A short scenario for doctors, nurses, therapists, hygienists and assistants in outpatient practices. Between appointments, decide when to share, how to protect a conversation and when a record should stay closed. All people and records are fictional.

Decision 1 of 6

Decision 1 of 6

Tomorrow's consultation

Mid-morning at Lakeview Health Partners, between appointments.

Verified referral request

Dr. Ward will treat Casey tomorrow and needs the recent notes. Protected connection ready; no restriction or special consent rule applies here.

Sam Ortiz Nurse colleague

Should we get a signature first?

Which basis is already established for this transfer? Choose one

Right

HIPAA permits sharing with another provider for treatment without an authorization. Minimum necessary doesn't apply to that disclosure. Use the approved route and clinical judgment about what helps this consultation.

Dr. Elena Ward

Received. That gives me the background before Casey arrives. Thank you.

HIPAA permits You may share with another provider for treatment without a HIPAA authorization. 45 CFR 164.506(c)(2); 164.502(b)(2)(i)

Why the other answers are wrong
  • Send the notes as a disclosure under a signed patient authorization. Not yet. No patient authorization is established in this request. The available basis is the verified treatment handoff; a separate authorization is not required on these facts.
  • Send the notes as a copy directed by the patient. Not yet. This is Dr. Ward's treatment request, not Casey's direction for an access copy. Use the treatment basis that is established here; neither a patient-directed copy nor a patient-carried copy is required.

Decision 2 of 6

An extra chair

Casey and Robin come into the treatment room.

Previous conversation

Verified referral request: Dr. Ward will treat Casey tomorrow and needs the recent notes. Protected connection ready; no restriction or special consent rule applies here.

Sam Ortiz: Should we get a signature first?

Dr. Elena Ward: Received. That gives me the background before Casey arrives. Thank you.

Robin Lane Casey's adult brother

I'm Casey's brother. I'll sit here.

Casey Lane Patient

Are we going over yesterday as well?

Casey is an adult, able to decide. You haven't established what Robin will be involved in.

Which question asks Casey's permission for this conversation? Choose one

Right

You ask Casey about Robin staying. Asking is one way: HIPAA also permits a real chance to object or a reasonable inference from the circumstances. Here, a quick check resolves the uncertainty.

Casey Lane

Robin can stay for the next steps. I'd like to discuss earlier visits privately.

HIPAA permits Involve family within the patient's agreement and their role in care. 45 CFR 164.510(b)(1)–(2)

Why the other answers are wrong
  • Is Robin already familiar with yesterday's events? Not yet. Background knowledge doesn't establish Casey's permission for this discussion. Ask Casey about Robin staying for it.
  • Is Robin usually involved in helping after visits? Not yet. Robin's earlier help can be relevant, but it does not establish Casey's choice about this conversation. Clarify the scope rather than infer unlimited sharing from past involvement.

Decision 3 of 6

One question on the way past

Sam, who is on Casey's care team, catches you in the corridor.

Previous conversation

Verified referral request: Dr. Ward will treat Casey tomorrow and needs the recent notes. Protected connection ready; no restriction or special consent rule applies here.

Sam Ortiz: Should we get a signature first?

Dr. Elena Ward: Received. That gives me the background before Casey arrives. Thank you.

Robin Lane: I'm Casey's brother. I'll sit here.

Casey Lane: Are we going over yesterday as well?

Casey is an adult, able to decide. You haven't established what Robin will be involved in.

Casey Lane: Robin can stay for the next steps. I'd like to discuss earlier visits privately.

Sam Ortiz Nurse colleague

Can we go over Casey's result before the next appointment?

Visitors can hear the exchange here. The workstation faces them: a result is open over a patient list. A staff room is available nearby.

Which actions fit this situation? Choose all that apply

Right

You continue the care conversation with practical safeguards. HIPAA doesn't demand silence or soundproof rooms. Incidental disclosure is permitted only with a lawful underlying use or disclosure, safeguards and minimum necessary where it applies.

Sam Ortiz

Thanks. Now we can finish the plan without broadcasting it.

HIPAA permits Care conversations can continue with reasonable safeguards; zero risk of overhearing isn't the standard. 45 CFR 164.502(a)(1)(iii), 164.530(c); HHS guidance

Why the other answers are wrong
  • Finish the discussion here, using appointment times rather than names. Not yet. Visitors can hear the exchange here. Replacing names with appointment times does not make this contextual care discussion private; the nearby staff room lets you reduce the audience.
  • Minimize the result window before you go. Not yet. The patient list sits behind that window. Minimizing the result exposes the list rather than securing the session. Lock the display before leaving it unattended.

Decision 4 of 6

A picture for the handoff

Back with Casey before tomorrow's consultation.

Previous conversation

Verified referral request: Dr. Ward will treat Casey tomorrow and needs the recent notes. Protected connection ready; no restriction or special consent rule applies here.

Sam Ortiz: Should we get a signature first?

Dr. Elena Ward: Received. That gives me the background before Casey arrives. Thank you.

Robin Lane: I'm Casey's brother. I'll sit here.

Casey Lane: Are we going over yesterday as well?

Casey is an adult, able to decide. You haven't established what Robin will be involved in.

Casey Lane: Robin can stay for the next steps. I'd like to discuss earlier visits privately.

Sam Ortiz: Can we go over Casey's result before the next appointment?

Visitors can hear the exchange here. The workstation faces them: a result is open over a patient list. A staff room is available nearby.

Sam Ortiz: Thanks. Now we can finish the plan without broadcasting it.

Casey Lane Patient

Could you photograph the diagram we made for Dr. Ward?

The diagram is needed for care and has Casey's name and birth date. Neither this paper diagram nor a copy is in the chart yet. Lakeview keeps care images in the chart. Its approved photo app can save there and then send that saved image, or send an image without retaining a copy; your phone's camera copies photos to your personal cloud account.

Which workflow do you use for the diagram? Choose one

Right

Use Lakeview's approved photo app, check the saved image and patient record, then send it to Dr. Ward. Casey's request doesn't approve your personal cloud.

Casey Lane

Good. Those arrows are much easier to show than explain.

Your practice's policy Capture and send care images through your practice's approved process, not an improvised personal-photo route. 45 CFR 164.310(d), 164.312(e); de-identification: 164.514(b)

Why the other answers are wrong
  • Take the photo using the phone's camera; send it to Dr. Ward. Not yet. That camera also copies the image to your personal cloud account. Sending it to a treating clinician doesn't approve that extra storage. Use Lakeview's approved photo app.
  • Take the photo using the app's send-only mode; send it to Dr. Ward. Not yet. That mode doesn't keep a copy, and Lakeview keeps care images in the chart. The treatment handoff is permitted, but it doesn't replace that local record step.

Decision 5 of 6

A name you recognize

You're preparing for your next patient.

Previous conversation

Verified referral request: Dr. Ward will treat Casey tomorrow and needs the recent notes. Protected connection ready; no restriction or special consent rule applies here.

Sam Ortiz: Should we get a signature first?

Dr. Elena Ward: Received. That gives me the background before Casey arrives. Thank you.

Robin Lane: I'm Casey's brother. I'll sit here.

Casey Lane: Are we going over yesterday as well?

Casey is an adult, able to decide. You haven't established what Robin will be involved in.

Casey Lane: Robin can stay for the next steps. I'd like to discuss earlier visits privately.

Sam Ortiz: Can we go over Casey's result before the next appointment?

Visitors can hear the exchange here. The workstation faces them: a result is open over a patient list. A staff room is available nearby.

Sam Ortiz: Thanks. Now we can finish the plan without broadcasting it.

Casey Lane: Could you photograph the diagram we made for Dr. Ward?

The diagram is needed for care and has Casey's name and birth date. Neither this paper diagram nor a copy is in the chart yet. Lakeview keeps care images in the chart. Its approved photo app can save there and then send that saved image, or send an image without retaining a copy; your phone's camera copies photos to your personal cloud account.

Casey Lane: Good. Those arrows are much easier to show than explain.

Another clinician's appointment list

A neighbour's name appears.

Sam Ortiz Nurse colleague

I know them too. I hope everything's okay.

You aren't treating, covering, supervising or advising on that person's care. There is no request for your involvement.

What do you do with that record? Choose one

Right

Leave the record closed. System access isn't permission to browse. Lakeview logs record access and reviews activity; a real later care assignment would be a different situation.

Sam Ortiz

You're right. We can wish them well without finding out why they're here.

HIPAA requires The practice limits staff record access by work role and need. 45 CFR 164.514(d)(2); activity review: 164.308(a)(1)(ii)(D)

Why the other answers are wrong
  • Resume your scheduled work with the visit summary checked. Not yet. No work assignment justifies opening this person's summary. A familiar name doesn't create a care role; prepare for the patient you are assigned to see.
  • Resume your scheduled work with the treatment notes checked. Not yet. The treatment purpose doesn't authorize a curiosity lookup without a care or work role. Here you aren't treating, covering, supervising or advising on this person's care.

Decision 6 of 6

At the door

Robin returns to take Casey home. Casey is nearby and able to answer questions.

Previous conversation

Verified referral request: Dr. Ward will treat Casey tomorrow and needs the recent notes. Protected connection ready; no restriction or special consent rule applies here.

Sam Ortiz: Should we get a signature first?

Dr. Elena Ward: Received. That gives me the background before Casey arrives. Thank you.

Robin Lane: I'm Casey's brother. I'll sit here.

Casey Lane: Are we going over yesterday as well?

Casey is an adult, able to decide. You haven't established what Robin will be involved in.

Casey Lane: Robin can stay for the next steps. I'd like to discuss earlier visits privately.

Sam Ortiz: Can we go over Casey's result before the next appointment?

Visitors can hear the exchange here. The workstation faces them: a result is open over a patient list. A staff room is available nearby.

Sam Ortiz: Thanks. Now we can finish the plan without broadcasting it.

Casey Lane: Could you photograph the diagram we made for Dr. Ward?

The diagram is needed for care and has Casey's name and birth date. Neither this paper diagram nor a copy is in the chart yet. Lakeview keeps care images in the chart. Its approved photo app can save there and then send that saved image, or send an image without retaining a copy; your phone's camera copies photos to your personal cloud account.

Casey Lane: Good. Those arrows are much easier to show than explain.

Another clinician's appointment list: A neighbour's name appears.

Sam Ortiz: I know them too. I hope everything's okay.

You aren't treating, covering, supervising or advising on that person's care. There is no request for your involvement.

Sam Ortiz: You're right. We can wish them well without finding out why they're here.

Robin Lane Casey's adult brother

Can you run through what I need to do once we leave?

Casey's recorded choice

Robin may join for the next steps. Earlier visits are discussed privately. Robin is helping with the trip and care at home.

What can you tell Robin? Choose one

Right

Help Robin with the agreed next steps. The existing agreement covers this conversation; if the question goes beyond it or Casey changes their choice, clarify before sharing more.

Robin Lane

That's what I needed. Casey can tell me the rest when they're ready.

HIPAA permits An involved family member can receive relevant care information within the patient's agreement. 45 CFR 164.510(b)(1)–(2)

Why the other answers are wrong
  • Casey's trip home permits reviewing the earlier clinical history. Not yet. Arranging the trip does not expand Casey's agreement to include the earlier clinical history. Robin can receive the relevant home-care guidance within the existing scope.
  • Casey's signature is required before a care briefing for Robin. Not yet. A signature is not an additional requirement for this conversation. Casey's existing agreement and Robin's involvement support the limited home-care briefing.

Shift complete

The next appointment

Sam Ortiz

We shared quite a lot in that break.

You

With the right people, for the right work.

Share for care. Respect the patient's choices about family. Open records for work, not curiosity.

Episode complete. Your employer must also teach its own policies and procedures.

All episodes

The whole clinician add-on

Every clinician episode: $19 per learner on top of the $29 core course every role needs. With a final check, a certificate of completion and a training record.

See pricing

Clinicians: one practice scenario, not a complete HIPAA training program. HIPAA requires your employer to train you on its own policies and procedures (45 CFR 164.530(b)) and to run a security awareness program (164.308(a)(5)). Sources checked 2026-10-20. More: all episodes by role · HIPAA training for new employees.