About This Page
This is a clinician-written, evidence-based summary aligned to the USMLE Step 2 CK Content Outline. It is intended for medical students preparing for USMLE Step 2 CK. Management reflects current ACC/AHA, USPSTF, and APA guidelines. Always cross-reference with UpToDate, institutional protocols, and clinical judgment.
The Bottom Line
- Report suspected child abuse or neglect; do not investigate to prove it before reporting
- Elder abuse, dependent adult abuse, certain injuries, and domestic violence reporting vary by state
- Report notifiable infectious diseases to local or state public health authorities under state law
- HIPAA permits disclosures required by law and many public health disclosures
- Serious imminent threats to identifiable people may justify disclosure to protect the potential victim
Overview
Mandatory reporting is an exception to confidentiality created to prevent serious harm to children, vulnerable adults, specific third parties, and the public. Reporting duties are primarily state-law based, but Step 2 CK expects recognition of classic categories: child abuse or neglect, elder or dependent adult abuse, reportable infectious diseases, certain violent injuries, impaired driving risks, and credible threats toward identifiable victims. The threshold for child abuse reporting is suspicion, not proof.
HIPAA and Public Protection
HIPAA does not prevent mandatory reporting. The Privacy Rule permits disclosures required by law and public health disclosures to authorized public health authorities. Clinicians should disclose only relevant information, document the basis for reporting, and continue caring for the patient unless safety requires otherwise. Mandatory reporting should be explained to the patient when doing so will not increase risk, but patient permission is not required when the law requires a report.
When This Issue Arises
Symptoms
Child presents with unexplained bruises, burns, fractures at different healing stages, delay in seeking care, or history inconsistent with injury
Elderly or dependent adult patient has bruising, pressure ulcers, malnutrition, dehydration, fearfulness, financial exploitation, or caregiver neglect
Patient diagnosed with tuberculosis, measles, meningococcal disease, syphilis, HIV, hepatitis, or another reportable condition under state law
Patient has recurrent syncope, seizures, intoxication, severe visual impairment, or cognitive impairment that may make driving unsafe
Patient makes a credible threat against an identifiable person
Signs
Patterned injuries, sentinel injuries in infants, injuries inconsistent with developmental stage
Caregiver refuses private interview or gives inconsistent explanations
Laboratory or imaging findings suggest neglect, poisoning, sexual abuse, or repeated trauma
Public health report forms or electronic lab reporting pathway available
Immediate danger to patient or others requires urgent protective action
Assessment Steps
First-line
Assess immediate safetyStabilize medical emergencies and separate patient from suspected abuser when safe and appropriate
Gather clinically necessary factsHistory, physical exam, photographs per policy, skeletal survey when indicated, STI testing after sexual abuse evaluation, and documentation of exact statements
Check reportabilityDetermine whether state law requires reporting to CPS, adult protective services, public health, DMV, law enforcement, or another agency
Second-line
Document objectivelyUse direct quotes, body maps, measurements, photographs per policy, and avoid accusatory language
Consult social work or child protection teamHelpful for safety planning and forensic coordination, but consultation does not replace clinician reporting duty
Public health notificationReport notifiable diseases to local or state health departments, not directly to casual contacts unless instructed by public health authorities
Specialist
Forensic or child abuse pediatrics consultUse for suspected nonaccidental trauma, sexual abuse, or complex neglect cases
Legal/risk managementUse for state-specific uncertainty, subpoenas, law enforcement requests, or reporting conflicts
Decision-Making Algorithm
HHS HIPAA Public Health Disclosures, CDC NNDSS Principles, and State Mandatory Reporting Laws1
Suspected child abuse or neglect
- Treat injuries and ensure immediate safety
- Report suspicion promptly to child protective services or designated authority according to state law
- Do not confront the suspected perpetrator if this may increase danger
- Do not wait for definitive proof, confession, or complete investigation
- Document findings, explanations, timing, and report details objectively
2
Elder or dependent adult abuse
- Assess capacity, immediate safety, and risk of retaliation
- Report to adult protective services or state-designated agency when required
- Involve social work for safe discharge planning
- Respect autonomy if a capacitated adult refuses help unless mandatory reporting or imminent danger applies
3
Infectious disease reporting
- Report notifiable diseases to local or state public health authorities
- Counsel patient on transmission prevention and partner notification when relevant
- Public health authorities generally manage contact tracing for reportable diseases
- Use minimum necessary information and follow institutional reporting workflows
4
Impaired driving and threats
- Counsel the patient not to drive and attempt voluntary compliance first when feasible
- Report to DMV or appropriate authority when state law requires or permits reporting and risk is substantial
- For credible threats to identifiable victims, take steps to protect the victim, which may include warning, police notification, or hospitalization
Common Pitfalls
- Suspicion is enough: Child abuse reporting does not require certainty.
- HIPAA is not a shield: HIPAA permits disclosures required by law and public health reporting.
- State law matters: Elder abuse, domestic violence, gunshot wounds, and impaired driving rules vary substantially.
- Do not promise absolute confidentiality: Explain limits before sensitive histories when possible.
- Do not personally investigate abuse: Stabilize, document, report, and involve appropriate teams.
USMLE Step 2 CK Exam Tips
- 1Infant with bruising or fractures at different ages: report to CPS immediately; do not discharge home while awaiting proof
- 2A child says a parent hurt them: report even if the parent denies it
- 3TB, measles, syphilis, gonorrhea, HIV, hepatitis, and meningococcal disease are classic reportable infectious disease examples
- 4HIPAA permits child abuse and public health reporting without authorization
- 5Elder abuse in a dependent adult: treat, ensure safety, report under state law, involve social work
- 6Patient threatens a named person: warn/protect the potential victim and notify appropriate authorities
- 7Impaired driving after seizures or dementia: counsel first, then follow state reporting law
- 8Do not tell an abusive caregiver details that could increase risk to the patient
practicetest your knowledge on mandatory reportingApply what you've learnt with USMLE Step 2 CK-style questions from the iatroX Q-Bank — ethics & law and beyond.
open q-bank