What must be done to protect patient privacy when discussing a case in a shared workspace?

• A. Discuss in private; avoid sharing PHI aloud in public areas; use de-identified information when possible.
• B. Discuss loudly to ensure teamwork.
• C. Post full patient names on a whiteboard.
• D. Leave documents open on a desk.

Answer: (C)

Protecting patient privacy in a shared workspace means keeping PHI out of earshot and out of sight. The best practice is to discuss cases in private whenever possible, avoid sharing PHI aloud in public areas, and use de-identified or anonymized information whenever you can to convey the necessary details without exposing identifying data. It also involves secure handling of documents—keeping them closed or stored, logging off computers, and not leaving papers where others can read them.

Discussing in public or loudly, posting full patient names on a whiteboard, or leaving documents open on a desk would expose identifiers and breach confidentiality. By choosing private spaces for sensitive conversations and limiting the amount of identifiable information shared, you protect privacy and stay compliant with privacy standards.