護理師照護病人時，哪些行為構成 HIPAA 隱私違規？（選所有適合的）
A nurse is managing a client with potential HIPAA breaches. Which actions are considered violations? (Select all that apply.)
- ADiscussing the case with the attending physician in a private office在私人辦公室與主治醫師討論病例
- BPosting a picture of the client's wound on social media✓ 正解在社群媒體上發布病人傷口的照片
- CLeaving the computer screen unlocked in a public area✓ 正解在公共區域將電腦螢幕保持解鎖狀態
- DTelling the client's family about the diagnosis without permission✓ 正解未經許可向病人家屬告知診斷結果
- ESharing the client's record with a colleague who is not involved in their care✓ 正解與未參與其照護的同事分享病人病歷
健康保險流通與責任法案（HIPAA）旨在保護病人的隱私與個資。任何未經授權的資訊洩漏，無論是有意或無意，均構成違規。核心原則是『基於醫療需求（Need-to-know basis）』分享資訊。社交媒體、未妥善管理資訊設備、未經授權向家屬洩漏診斷，以及與非照護團隊人員討論，皆直接違反了保護病患隱私的法律規範。
The Health Insurance Portability and Accountability Act (HIPAA) is intended to protect client privacy and personal information. Any unauthorized disclosure of information, whether intentional or inadvertent, constitutes a violation. The core principle is to share information on a need-to-know basis. Social media posts, unsecured information devices, unauthorized disclosure of diagnoses to family members, and discussion with individuals outside the care team all directly violate the legal requirements for protecting client privacy.
美國醫院對 HIPAA 的執行極為嚴格，違規可能導致護理師直接被解雇並面臨法律訴訟。台灣臨床對隱私的保護意識雖逐年提升，但仍常見在非隱私空間討論病情，赴美後需極度警覺。