Legal & EthicalQuestion 194 of 200

A CNA discusses a resident's HIV status with another CNA in the elevator where visitors can hear. This is:

a.Allowed, because an elevator counts as a private staff area
b.Allowed, because both people are caregivers for the resident
c.A HIPAA privacy violation; PHI must be discussed only with those who have a need to know and in a secure setting; the facility must train staff on safeguards under 45 CFR §164.530
d.Allowed, because the resident is not present to overhear it

Explanation

45 CFR §164.530 requires covered entities to implement administrative, physical, and technical safeguards to protect PHI from incidental disclosures. Discussing diagnoses (especially sensitive ones like HIV under 42 USC §300ff-25 and CA HSC §120975 confidentiality) in public spaces — elevators, hallways, breakrooms within earshot of others, or social media — is a violation. Status as a coworker (b) does not satisfy 'need to know' for unassigned residents. Resident absence (d) and elevator 'privacy' (a) are not defenses. The CNA self-reports and the privacy officer assesses breach notification under 45 CFR §164.404.

Law Reference: HIPAA 45 CFR §164.530

This topic, taught in full in the Certified Nursing Assistant (CNA) guide. CNA — Complete Study Guide (2026) — PDF + EPUB, $19.99 · 14-day refund →

Practice all 200 questions free — no signup required.

Own the complete Certified Nursing Assistant (CNA) guide — PDF + EPUB, $19.99 →

Related questions on this topic

Last reviewed: · editorial process

PrepPass team · Verified against California CNA Certification Exam · How we review
Report