護理師接到自稱是家屬的電話，詢問病人的狀況。護理師的哪項行為符合 HIPAA（醫療保險隱私及責任法案）規定？
A nurse receives a phone call from a person claiming to be a family member asking about a client's condition. Which action by the nurse is consistent with HIPAA regulations?
- AExplain that the client is stable but cannot provide specifics解釋案主狀況穩定，但無法提供詳細資訊
- BVerify the caller's identity using a pre-established security code✓ 正解使用預先建立的安全密碼驗證來電者身分
- CTransfer the call to the client's room to speak with the client將電話轉接至案主房間與案主對話
- DProvide a brief summary of the client's current vital signs提供案主目前生命徵象的簡要摘要
根據隱私法規，在電話中揭露病患資訊前，必須先確認對方的身分是否獲得病患授權。使用預先設定的密碼（Security code）是確認身分的標準做法。D、A 即使透露少量資訊也屬違法；C 雖看似安全，但若病人不想接電話或無法接聽，仍可能造成資訊外流。
Under privacy regulations, before disclosing any patient information over the telephone, the nurse must verify that the caller is authorized by the patient. Using a pre-established security code is the standard method of identity verification. Options D and A constitute a violation even if only minimal information is disclosed; option C may appear safe but can still result in unauthorized disclosure if the patient does not wish to or is unable to take the call.
美國 HIPAA 罰則極重且執行嚴格；台灣雖有《個人資料保護法》，但在臨床上電話詢問病情的情況仍較普遍且較不嚴謹。