A coworker wants to view a patient’s family member electronic health record to check a diagnostic result. What should the RPN do?

• A. Grant access
• B. Call security
• C. Suggest she talks to the family member's physician
• D. Provide a redacted report

Answer: (C)

Protecting patient privacy is essential. EHRs contain sensitive information that can be shared only with people who are directly involved in the patient’s care or who have explicit authorization. In this situation, a coworker is trying to view a family member’s record to check a diagnostic result. The proper response is to uphold privacy by directing the request through the correct channels—suggesting she talk to the family member’s physician. The physician can confirm whether the patient has given consent and, if so, release the information through the appropriate, compliant process. Granting access directly would bypass consent and policy, calling security isn’t the right step for a routine consent issue, and providing a redacted report still requires proper authorization.