Under HIPAA 45 CFR §164.512, a CNA may disclose PHI WITHOUT the resident's written authorization in which situation?
Explanation
45 CFR §164.512 permits disclosure of PHI without individual authorization for specified public-interest purposes, including reports required by law (such as elder abuse reports under W&I §15630 and child abuse reports under PC §11166), public health activities, judicial proceedings, and law enforcement subject to limits. Social media posts (b) — even 'de-identified' — typically still constitute PHI disclosure and are HIPAA violations. Neighbor gossip (d) and journalist disclosures (c) are violations. Mandated reporting is both permitted under HIPAA and required under California law; the reporter's identity is also confidential.
Law Reference: HIPAA 45 CFR §164.512This topic, taught in full in the Certified Nursing Assistant (CNA) guide. CNA — Complete Study Guide (2026) — PDF + EPUB, $19.99 · 14-day refund →
Practice all 200 questions free — no signup required.
Own the complete Certified Nursing Assistant (CNA) guide — PDF + EPUB, $19.99 →
Related questions on this topic
- A nurse asks a CNA to start an IV on a new admission because the unit is short-staffed. The CNA should:
- Why is the documentation principle 'not documented = not done' important?
- Under HIPAA's 'minimum necessary' standard (45 CFR §164.502(b)), a CNA should access protected health information (PHI):
- A resident asks the CNA for a copy of her own medical record. The correct CNA response is:
- A CNA posts a TikTok video taken in the nursing facility hallway. Two residents appear in the background, identifiable by face. This is:
- Informed consent for a non-emergency treatment generally requires:
Last reviewed: · editorial process