SESK: Stuff Everyone Should Know · sesk.info/hipaa-snooping-patient-records
Nurse Kim looks up her neighbor's chart out of curiosity. Is that allowed?
No. Looking at records you do not need for your job is not allowed.
- No, it is a use HIPAA does not allow ✔
- Yes, if Kim does not tell anyone
- Yes, if Kim does it on her break
Why: Workers may only look at the PHI they need to do their job. Snooping is an impermissible use, even if nothing is shared, and workers who break the rules must be disciplined.
Huh, didn't know that: The Security Rule requires organizations to regularly review records of system activity, such as audit logs and access reports.
Why did the nosy chart reader get caught? The computer kept better notes than she did.
Like this card?
References
Answer: No, it is a use HIPAA does not allow. Workers may only look at the PHI they need to do their job. Snooping is an impermissible use, even if nothing is shared, and workers who break the rules must be disciplined.
- 45 CFR 164.502 (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.502
A covered entity or business associate may not use or disclose protected health information, except as permitted or required by this subpart
Checked 2026-10-10. - 45 CFR 164.530(e) (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.530
A covered entity must have and apply appropriate sanctions against members of its workforce who fail to comply
Checked 2026-10-10. - 45 CFR 164.308 (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C/section-164.308
regularly review records of information system activity, such as audit logs, access reports
Checked 2026-10-10.
Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.
More stuff everyone should know
That's stuff everyone should know.