What constitutes a confidential information breach and what general steps should be taken after discovery?

• A. Disclosure of identifiable patient information to unauthorized persons; immediately contain the breach, notify appropriate authorities/parties, document, and implement corrective actions
• B. Leaving a chart on the desk overnight
• C. Discussing a patient in a cafeteria
• D. Failing to report a disclosed breach to the appropriate authorities

Answer: (A)

A confidential information breach happens when identifiable patient information is shared with someone who isn’t authorized to see it. The best choice captures both the violation itself and the proper response: immediately contain the breach to prevent more exposure, notify the appropriate authorities or parties, document what happened, and implement corrective actions to prevent recurrence. This reflects the real-world duty in healthcare to act quickly to limit harm, inform the right people, keep a record for accountability, and fix weaknesses in processes or safeguards. Other common privacy lapses, like leaving a chart unattended or discussing a patient in a public area, are breaches too, and failing to report a disclosed breach is a violation, but the option that combines the breach definition with the recommended post-discovery steps provides the most complete, correct approach.