Nurse Kim looks up her neighbor's chart out of curiosity. Is that allowed?

No. Looking at records you do not need for your job is not allowed.

Start playing free

  1. No, it is a use HIPAA does not allow ✔
  2. Yes, if Kim does not tell anyone
  3. Yes, if Kim does it on her break

Why: Workers may only look at the PHI they need to do their job. Snooping is an impermissible use, even if nothing is shared, and workers who break the rules must be disciplined.

Huh, didn't know that: The Security Rule requires organizations to regularly review records of system activity, such as audit logs and access reports.

The dad joke
Why did the nosy chart reader get caught? The computer kept better notes than she did.
Like this card?
Play the game

References

Answer: No, it is a use HIPAA does not allow. Workers may only look at the PHI they need to do their job. Snooping is an impermissible use, even if nothing is shared, and workers who break the rules must be disciplined.

  1. 45 CFR 164.502 (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.502
    A covered entity or business associate may not use or disclose protected health information, except as permitted or required by this subpart
    Checked 2026-10-10.
  2. 45 CFR 164.530(e) (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.530
    A covered entity must have and apply appropriate sanctions against members of its workforce who fail to comply
    Checked 2026-10-10.
  3. 45 CFR 164.308 (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C/section-164.308
    regularly review records of information system activity, such as audit logs, access reports
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game