4. (40 points) For the following examples, note if it is an incidental disclosure or a violation of the HIPAA Privacy Rule,
and why:
a. Confidential conversations between providers/staff or with patients that are overheard
b. Seeing patient names when signing in
Note: What is allowed on the sign-in sheet? Is the reason for the visit allowed?
c. Unauthorized persons walking by medical equipment and seeing a name on a screen or other device
d. Leaving detailed messages for patients at their home answering machine, to remind them of an
appointment (including the reason for the visit) and inform them that their prescription is ready (including
giving the prescription name).
Note: If you are to leave a message for a patient on their voicemail/answering machine, what information is
recommended to include?