Which action best protects patient privacy in an informatics environment?

• A. Accessing records only with legitimate need
• B. Leaving data on a desk
• C. Sharing passwords with teammates
• D. Discussing patient information in open public space

Answer: (A)

Protecting patient privacy in informatics hinges on giving each user access only to the information needed to perform their role, and ensuring every access is auditable. Accessing records only with legitimate need embodies this principle, because it limits exposure of PHI to those who truly require it and supports confidentiality and accountability through logging. The other actions create clear privacy risks: leaving data on a desk exposes PHI to anyone who passes by; sharing passwords undermines authentication and makes it impossible to trace who accessed data; discussing patient information in open public spaces allows bystanders to overhear sensitive details. Limiting access to legitimate needs is the most effective way to protect privacy and comply with privacy regulations.