What should you do if you accidentally disclose patient information to an unauthorized person?

• A. Ignore it and continue.
• B. Immediately report the incident per facility policy and document any actions taken.
• C. Blame someone else.
• D. Delete the information from your memory.

Answer: (B)

When patient information is disclosed to someone who isn’t authorized, it’s a privacy breach that needs immediate action. The best course is to report the incident right away according to the facility’s privacy or security policy and to document what happened and what actions were taken. This helps the organization assess risk, notify the right people, implement corrective steps, and meet legal and regulatory obligations. It also protects the patient from further exposure and supports trust in the care provided. Ignoring the incident, blaming others, or trying to erase it isn’t appropriate because they don’t stop the breach or address the harm; reporting and documenting create a proper record and show responsible professional conduct.