8.2 Privacy, Confidentiality, and HIPAA
Key Takeaways
- Confidentiality means sharing resident information only with authorized people for care-related reasons.
- Do not discuss resident information in hallways, elevators, social media, or with unauthorized family members.
- Use privacy measures during care, phone calls, visitors, mail, and personal belongings.
- Report privacy breaches according to facility policy.
- A CNA can listen to family concerns but should not give medical updates outside scope.
Confidential Information
Resident information includes diagnosis, medications, condition, care plan, finances, family issues, room number in some contexts, photographs, and anything learned while providing care.
The CNA may share information with care team members who need it for the resident's care. Curiosity is not a care reason.
Common Privacy Risks
| Situation | Correct CNA Action |
|---|---|
| Family asks for lab results | Refer to nurse |
| Friend asks if a resident lives there | Follow facility privacy policy |
| Coworkers discuss resident in elevator | Stop or redirect conversation |
| CNA wants to post a funny work story | Do not post resident information |
| Visitor asks about roommate | Protect roommate privacy |
Privacy During Care
Close curtains or doors. Cover the resident. Do not expose the resident while gathering supplies. Knock before entering, even if the resident is confused or bedbound.
Social Media
Never post resident photos, names, stories, room details, or care incidents. Even "no names" posts can identify a resident.
Family Communication
Families may be involved in care, but the CNA should not provide medical interpretations or private updates beyond role and policy.
Safe responses include:
- "Let me get the nurse for you."
- "I can tell the nurse you have a question."
- "I cannot discuss another resident's information."
Exam Tip
If an answer shares information with someone who does not need it for care, it is probably wrong.
A visitor asks why the resident's roommate is on oxygen. What should the CNA say?
Which situation is a confidentiality violation?