A resident's adult son calls the facility asking what medications his mother is taking. The CNA should:
Explanation
HIPAA Privacy Rule (45 CFR §164.502) and 42 CFR §483.10(g) protect resident health information. Family status alone does not authorize disclosure; only individuals designated by the resident or holding valid authority (POA for healthcare, conservator) may receive PHI, and disclosure must be made by appropriate licensed staff. The CNA should not confirm or deny information and must route the request to the nurse, who will verify authorization before any release. Options b, c, and d would each be unauthorized disclosures.
Law Reference: 42 CFR §483.10(g); HIPAA 45 CFR §164.502This topic, taught in full in the Certified Nursing Assistant (CNA) guide. CNA — Complete Study Guide (2026) — PDF + EPUB, $19.99 · 14-day refund →
Practice all 200 questions free — no signup required.
Own the complete Certified Nursing Assistant (CNA) guide — PDF + EPUB, $19.99 →
Related questions on this topic
- A resident in a California skilled nursing facility refuses her scheduled bath. The CNA should:
- A CNA sees a coworker slap a resident across the face. Under California's Elder Abuse Reporting law, the CNA must:
- Which of the following best reflects a resident's right to participate in care planning?
- A nurse orders a vest restraint because a resident keeps trying to get out of bed at night. Before applying it, the CNA knows that under federal restraint rules:
- While giving perineal care, a CNA notices the room door is open and visitors are walking past. The CNA should first:
- A resident has a signed POLST indicating Do Not Resuscitate (DNR) and 'comfort measures only.' The resident becomes unresponsive with no pulse. The CNA should:
Last reviewed: · editorial process