下列哪些是違反 HIPAA 的行為？（選所有適合的）
Which of the following are examples of HIPAA violations? (Select all that apply.)
- ADiscussing a patient's condition in the hospital cafeteria✓ 正解在醫院餐廳討論病患狀況
- BPosting a picture of a patient's wound on social media✓ 正解在社群媒體上發布病患傷口照片
- CAllowing family access to records with patient consent在獲得病患同意下允許家屬查閱病歷
- DLeaving a computer screen with patient data visible to the public✓ 正解將顯示病患資料的電腦螢幕留給公眾可見
- ESharing patient info with the medical team for treatment為治療目的與醫療團隊共享病患資訊
健康保險流通與責任法案（HIPAA）旨在保護病人的受保護健康資訊（PHI）。核心原則是「最小必要原則」（Minimum Necessary Rule），即僅在醫療照護所需範圍內存取資料。違反隱私的行為通常涉及未經授權的資訊洩露，包括在公共場合討論病情、未經同意在社群媒體發布影像，以及未採取適當防護措施導致他人可窺視數位資料。正確答案 A、B、D 均構成隱私侵犯；而 C 與 E 屬於合法的醫療照護流程與病人授權範圍內的操作。
The Health Insurance Portability and Accountability Act (HIPAA) is designed to protect patients' protected health information (PHI). Its core principle is the 'Minimum Necessary Rule,' which permits access to information only to the extent required for care. Privacy violations typically involve unauthorized disclosure, including discussing patient conditions in public areas, posting patient images on social media without consent, and failing to take adequate safeguards so that others can view digital information. The correct answers A, B, and D all constitute privacy breaches; C and E represent legitimate clinical care processes and patient-authorized disclosures.
美國 HIPAA 法規極為嚴格，違規罰則高昂且有刑事責任。台灣雖有《個人資料保護法》與《醫療法》規範，但臨床情境中對「護理站討論」與「社群軟體使用」的敏感度與執法強度，美國遠高於台灣。