A man telephones the unit, says he is the adult son of an alert, competent client and asks for his mother's test results. The client has not named anyone to receive information. Which action by the nurse is appropriate?
Give a general summary of the results, because he is immediate family
Ask him for the client's date of birth and share the results if he gives it correctly
Tell him that results cannot be given without the client's permission, and offer to let the client know he called
Refer him to the health records department to obtain the results
Show the answer and explanation
Answer: C. Tell him that results cannot be given without the client's permission, and offer to let the client know he called
Topic: sharing information with family
A client's health information may be shared with family only when the client agrees. Because the client is competent and has not given permission, the nurse protects confidentiality and leaves the decision to share with the client.
Why the others are wrong
A – Being a family member does not by itself give a right to a competent adult's health information.
B – Knowing a date of birth does not show that the client has authorized disclosure.
D – The records department also needs the client's authorization, and this avoids the simple step of asking the client.
Written for the Medical Exam YouTube channel and answered blind by a second AI model before publication.
2Question
A nurse educator reviews examples of social media use by staff. Which actions breach client confidentiality?
Select all that apply.
Posting a photograph of the unit's holiday decorations in which a client's name on a room board can be read in the background
Writing in a private group open only to nurses about 'the well-known local chef we admitted last night with a stroke'
Sharing the hospital's own public post that announces a blood donation drive
Posting 'Long shift, very tired tonight' with no mention of clients or of the workplace
Sharing a nursing journal article on stroke care with a personal comment on the findings
Show the answers and explanation
Answers: A and B.
A – Posting a photograph of the unit's holiday decorations in which a client's name on a room board can be read in the background
B – Writing in a private group open only to nurses about 'the well-known local chef we admitted last night with a stroke'
Topic: social media
Confidentiality is breached whenever information that could identify a client is disclosed without authorization. A readable name in a photograph identifies a client, and a description by occupation, diagnosis and date of admission can identify one even when no name is given. Privacy settings and closed groups do not make a disclosure acceptable.
Why the others are wrong
C – This is public information released by the hospital and contains nothing about a client.
D – A general remark with no reference to clients or the workplace discloses no client information.
E – Professional literature and a personal opinion about it contain no client information.
Written for the Medical Exam YouTube channel and answered blind by a second AI model before publication.
3Question
Which actions by a nurse protect the security of client information?
Select all that apply.
Logging off the workstation before stepping away, even for a minute
Using a colleague's login while the nurse's own account is locked, so that a medication is documented on time
Opening the record of a neighbor who is a client on another unit to see how she is doing
Turning the screen so that it cannot be read from the hallway
Securing a printed client list found in the cafeteria and reporting it to the supervisor or privacy officer
Sending a client's laboratory results to the provider's personal e-mail address when the provider asks for this
Show the answers and explanation
Answers: A, D and E.
A – Logging off the workstation before stepping away, even for a minute
D – Turning the screen so that it cannot be read from the hallway
E – Securing a printed client list found in the cafeteria and reporting it to the supervisor or privacy officer
Topic: workstations, passwords and access
Information security rests on individual accountability for one's own login, access only to the records needed for one's own work, protection of screens and paper from view, approved secure channels for sending data, and prompt reporting of a possible breach.
Why the others are wrong
B – Every entry must be traceable to the person who made it; the nurse should have the account unlocked and follow downtime procedure.
C – Access is limited to clients in the nurse's own care; concern for a neighbor is not a need to know.
F – Personal e-mail is not a secure, approved channel; the provider's request does not change that.
Written for the Medical Exam YouTube channel and answered blind by a second AI model before publication.
4Question
A nurse realizes that a fax containing a client's laboratory results was sent to the wrong outpatient clinic number. What is the nurse's best action?
Take no action, because the fax listed only laboratory values and did not include a diagnosis or other details
Send a corrected fax to the right clinic and say nothing about the first one, so no one is alarmed
Report the misdirected fax right away to the supervisor or privacy officer, following facility policy
Telephone the client's family to apologize for the error before telling anyone at work
Show the answer and explanation
Answer: C. Report the misdirected fax right away to the supervisor or privacy officer, following facility policy
Topic: misdirected fax as privacy breach
Sending protected health information to the wrong recipient may be a privacy breach. The nurse reports it promptly through the chain set by policy so the privacy officer can retrieve or destroy the information, assess the breach and notify the client as required.
Why the others are wrong
A – Laboratory values linked to a named client are protected information, so the disclosure must be reported regardless of content.
B – A silent correction leaves the original recipient holding the information and prevents the breach from being assessed.
D – Disclosure to the client is handled through the privacy process; contacting family first is another unauthorized disclosure risk.
Written for the Medical Exam YouTube channel and answered blind by a second AI model before publication.
5Question
A client asked on admission not to be listed in the facility directory. The charge nurse reviews which disclosures of this client's health information are allowed without the client's written authorization under federal privacy rules. Which disclosures are allowed?
Select all that apply.
Sharing relevant details with the dietitian who is treating the client
Reporting a communicable disease to the public health department as required by law
Giving the admission diagnosis to the client's employer who calls to ask why the client is absent
Reporting suspected child abuse to the designated protective agency
Telling a news reporter the condition of a well-known client
Telling a neighbor who asks that the client is on the unit
Show the answers and explanation
Answers: A, B and D.
A – Sharing relevant details with the dietitian who is treating the client
B – Reporting a communicable disease to the public health department as required by law
D – Reporting suspected child abuse to the designated protective agency
Topic: disclosures allowed without authorization
Federal privacy rules permit disclosure for treatment, and for public health reporting and abuse reporting that the law requires. Directory information (presence and a one-word condition) may normally be given to people who ask by name, but this client opted out, so it cannot be released. Employers, news media and neighbors have no treatment role or legal entitlement, so the client's authorization is required.
Why the others are wrong
C – An employer is not part of treatment; the client must authorize any release of diagnosis.
E – The client opted out of the facility directory, so even a one-word condition cannot be given to the media; anything more always needs authorization.
F – Because the client opted out of the directory, staff cannot confirm to a caller or visitor that the client is on the unit.
Written for the Medical Exam YouTube channel and answered blind by a second AI model before publication.
6Question
A nurse prepares to conduct a follow-up video visit with a client at home. Which actions help protect the client's privacy?
Select all that apply.
Use a private room with the door closed
Confirm the client's identity and ask who else is in the room at the client's location
Use a free consumer video app already on the nurse's personal phone
Record the visit on a personal device so the nurse can write the note later
Let a coworker listen in without telling the client
Show the answers and explanation
Answers: A and B.
A – Use a private room with the door closed
B – Confirm the client's identity and ask who else is in the room at the client's location
Topic: privacy during a telehealth visit
Telehealth carries the same privacy duties as in-person care. The nurse uses a private setting, confirms identity, and learns who else can hear the visit so that information is shared only with the client's permission. Unsecured apps, personal-device recordings and undisclosed listeners create breaches.
Why the others are wrong
C – A consumer app and a personal phone are not secure, approved channels for protected information.
D – Recording on a personal device creates an unauthorized copy of protected information.
E – Anyone listening without the client's knowledge is an undisclosed disclosure of the visit.
Written for the Medical Exam YouTube channel and answered blind by a second AI model before publication.
7Question
During bedside shift report, the nurses notice that the client's adult friend has come to visit and is sitting in the room. The report includes sensitive details about the client's diagnosis. What should the nurse do?
Whisper the sensitive details quietly enough that the friend sitting nearby is unlikely to hear them
Ask the client whom they want present and have others step out if the client prefers
Leave out the sensitive details and text them to the oncoming nurse later
Give the whole report in the hallway where visitors cannot see the client
Show the answer and explanation
Answer: B. Ask the client whom they want present and have others step out if the client prefers
Topic: privacy during bedside report
Bedside report involves the client, but the client decides who may hear personal health information. The nurse asks the client's preference and arranges for visitors to step out or for sensitive parts to be shared privately.
Why the others are wrong
A – Whispering still risks the friend overhearing and ignores the client's right to decide who hears.
C – Texting sensitive details is not a secure method and delays information the oncoming nurse needs.
D – A hallway report can be overheard by others and removes the client from the discussion.
Written for the Medical Exam YouTube channel and answered blind by a second AI model before publication.
8Question
During a clinic visit a 16-year-old client says to the nurse, "I want to tell you something, but you have to promise that you will not tell my parents." Which response by the nurse is best?
"I promise. Whatever you tell me stays between the two of us."
"You are a minor, so I have to share everything you tell me with your parents."
"Tell me what it is first, and then I will decide whether I can keep it secret."
"What you tell me is kept private. The exception is if you or someone else is at risk of serious harm; then I would have to involve others, and I would tell you first."
Show the answer and explanation
Answer: D. "What you tell me is kept private. The exception is if you or someone else is at risk of serious harm; then I would have to involve others, and I would tell you first."
Topic: limits of confidentiality with adolescents
Adolescents are more likely to disclose risk behaviors when they are offered confidential care, but confidentiality has limits: risk of serious harm to self or others, and abuse, must be acted on. Stating the limits before the disclosure is honest and protects the relationship.
Why the others are wrong
A – A blanket promise cannot be kept if the disclosure involves suicide risk, abuse or danger to others; breaking it later destroys trust.
B – It is inaccurate - adolescents are entitled to confidential care in many situations - and it ends the conversation.
C – It asks the adolescent to disclose without knowing the rules, which is less honest than setting out the limits beforehand.
Written for the Medical Exam YouTube channel and answered blind by a second AI model before publication.
9Question
A nurse walks past a shared workstation in the hallway and sees a colleague's session open with a client's record displayed. The colleague is not present. What should the nurse do?
Read the record to check whether it contains information relevant to the nurse's own work
Leave the session open because it belongs to the colleague
Take a photograph of the screen to show the colleague what was left open
Lock or log off the session without reading the record, and inform the colleague and follow clinic policy on reporting
Show the answer and explanation
Answer: D. Lock or log off the session without reading the record, and inform the colleague and follow clinic policy on reporting
Topic: unattended workstation
Protecting health information includes securing workstations and reporting lapses. The nurse closes the exposure without viewing the content and follows reporting policy, as required by HIPAA safeguards.
Why the others are wrong
A – Accessing a record without a need to know violates privacy rules.
B – An open session lets anyone view or alter the record under the colleague's name.
C – Photographing the screen creates another privacy breach.
Written for the Medical Exam YouTube channel and answered blind by a second AI model before publication.
10Question
During a video follow-up visit, a client with a surgical wound offers to send photographs of the incision through a free consumer messaging app on her personal phone. What is the nurse's best response?
Accept the photos in the messaging app, since the client herself agreed to send them
Direct her to the organization's secure patient portal for the photos
Give her the nurse's personal mobile number so she can text the images directly to the nurse
Tell her photos cannot be used for assessment and the wound must be seen in person only
Show the answer and explanation
Answer: B. Direct her to the organization's secure patient portal for the photos
Topic: secure channels for telehealth images
Health information must travel through channels that meet privacy and security rules, such as the organization's secure portal or approved telehealth platform. Many consumer apps lack the safeguards required to protect client data.
Why the others are wrong
A – Consent to send does not make an unsecured consumer app compliant; the organization is still responsible for protecting the information.
C – Using a personal phone for health information bypasses the organization's safeguards and creates a privacy risk.
D – Wound photos are a valid telehealth tool when sent through a secure route; refusing them removes useful assessment data.
Written for the Medical Exam YouTube channel and answered blind by a second AI model before publication.
11Question
A clinic nurse notices that a discharge summary from the community hospital appears in the client's chart automatically, and the clinic's updates are visible to the hospital as well. Which characteristic of the record makes this possible?
Storage of only the notes written within the clinic and kept in one office
Interoperability with other organizations' systems
A feature that allows clients to edit their own laboratory results
A requirement that paper copies be scanned in each day
Show the answer and explanation
Answer: B. Interoperability with other organizations' systems
Topic: electronic health record interoperability
An electronic health record is designed to share information across organizations through standard interfaces, whereas an electronic medical record is the digital chart within a single practice. This exchange supports continuity of care.
Why the others are wrong
A – A record limited to one office could not receive outside summaries.
C – Clients may view and request corrections, but they do not edit source results; this is not what enables sharing.
D – Scanning paper is a manual process and does not explain automatic exchange.
Written for the Medical Exam YouTube channel and answered blind by a second AI model before publication.
12Question
A hospital adds barcode scanning at the bedside before medication administration. A nurse informatics specialist is asked which benefit the unit should expect first. What is the best answer?
Less need to confirm the client's identity using two identifiers
Longer time spent on charting each shift
Removing the need for provider orders
Fewer medication errors from automated checks
Show the answer and explanation
Answer: D. Fewer medication errors from automated checks
Topic: benefit of bedside barcode scanning
Barcode medication administration checks the client, drug, dose, route and time against the order electronically, catching mismatches before the dose is given. The main expected benefit is fewer medication errors.
Why the others are wrong
A – Scanning supports identification and does not replace it.
B – Informatics tools are meant to streamline care, not lengthen documentation.
C – Orders remain required; scanning compares the drug and client with the order.
Written for the Medical Exam YouTube channel and answered blind by a second AI model before publication.
13Question
While auditing access logs, a nursing informatics specialist finds that a nurse from another unit opened the record of her neighbor, who is not on her assignment. What is the most appropriate action?
Delete the log entry to avoid unfair punishment of the nurse
Report it to the privacy officer as unauthorized access
Warn the nurse informally and take no further action
Tell the neighbor directly before telling the privacy officer
Show the answer and explanation
Answer: B. Report it to the privacy officer as unauthorized access
Topic: unauthorized record access
Viewing a record without a work reason is unauthorized access to protected health information. The proper action is to report it through the facility's privacy process so it can be reviewed and any required notifications made.
Why the others are wrong
A – Altering audit logs is a serious violation and destroys evidence.
C – An informal warning bypasses the required review and may leave a breach unreported.
D – Notification to the client is handled through the facility's formal breach process, not informally.
Written for the Medical Exam YouTube channel and answered blind by a second AI model before publication.
14Question
A nurse begins a video visit with a client at home. Before the assessment, which action is most important?
Verify the client's identity and physical location and confirm that the client is in a private place
Ask the client to share the screen to show the lighting in the home
Review the next day's appointments for other clients scheduled that morning
Record the visit automatically so notes can be written later from the video
Show the answer and explanation
Answer: A. Verify the client's identity and physical location and confirm that the client is in a private place
Topic: opening checks for telehealth
At the start of a telehealth visit, the nurse confirms who the client is (two identifiers) and where the client is, in case emergency help is needed, and that privacy is adequate to protect confidentiality. Recording requires consent.
Why the others are wrong
B – Screen sharing is not needed, and lighting is secondary to identity and privacy.
C – Other clients' appointments are irrelevant to this visit and distract the nurse.
D – Recording requires consent and does not replace identity and privacy checks.
Written for the Medical Exam YouTube channel and answered blind by a second AI model before publication.
NCLEX-RN is a registered trademark of the National Council of State Boards of Nursing, Inc. (NCSBN). This site is not affiliated with, sponsored by or endorsed by the owner of that mark.
Nursing