skip to main content

HIPAA minimum necessary — USMLE Step 3 MCQ

Instant feedback + full explanation. One question, done properly.

EasyEthics, Patient Safety, Quality Improvement, Systems-Based PracticeHIPAA minimum necessaryUSMLE Step 3

A physician receives a call from a patient's employer asking for details about the patient's new HIV diagnosis and medications. The patient has not authorized disclosure. The employer says the information is needed for scheduling. Which of the following is the most appropriate at this time?

Educational content. Not a substitute for clinical judgement or local policy.

Reveal the answer and explanation

Correct answer: A — Decline to disclose protected health information without authorization

HIPAA generally prohibits disclosure of protected health information to employers without patient authorization or a specific legal exception.

Reference: HHS HIPAA Privacy Rule