CBHT - Certified Behavioral Health Technician Client Confidentiality and HIPAA Questions and Answers 1 — Questions and Answers
Question 1: A Behavioral Health Technician (BHT) is part of a treatment team meeting. Under the HIPAA Privacy Rule's 'minimum necessary' standard, which of the following actions is most appropriate?
- Accessing the full medical history of every client being discussed to be fully prepared.
- Sharing detailed, unsubstantiated personal opinions about a client's family life with the entire team.
- Accessing and discussing only the specific client information needed to contribute to the treatment plan. (Correct answer)
- Listening to all case discussions but only documenting information related to their assigned clients.
Correct answer: Accessing and discussing only the specific client information needed to contribute to the treatment plan.
The HIPAA 'minimum necessary' standard requires that healthcare workers only access, use, or disclose the minimum amount of Protected Health Information (PHI) needed to accomplish a specific task. In this scenario, the BHT should only engage with the information that is directly relevant to their role in the client's treatment planning.
Question 2: A client in a residential facility tells their BHT, 'I have a plan and I'm going to seriously harm my former boss when I get out of here next week.' Which of the following is the BHT's most critical responsibility?
- Maintain strict client confidentiality above all else.
- Immediately inform the facility's clinical supervisor or licensed professional about the threat. (Correct answer)
- Wait to see if the client mentions the plan again before taking action.
- Advise the client that making threats is not productive for their recovery.
Correct answer: Immediately inform the facility's clinical supervisor or licensed professional about the threat.
This scenario involves the 'Duty to Warn' or 'Duty to Protect,' which is a legal and ethical exception to confidentiality. When a client communicates a serious threat of physical violence against an identifiable victim, staff have a responsibility to report it to the appropriate personnel to take steps to protect the potential victim.
Question 3: Under which of the following circumstances is a BHT generally permitted to disclose Protected Health Information (PHI) without a client's specific authorization?
- When a client's family member calls and asks for a general update.
- For treatment, payment, and healthcare operations. (Correct answer)
- When a local news reporter is doing a story on the treatment facility.
- When a former therapist of the client requests records out of curiosity.
Correct answer: For treatment, payment, and healthcare operations.
HIPAA specifically permits the use and disclosure of PHI without an individual's authorization for essential activities including treatment, payment for services, and routine healthcare operations. Disclosures for other reasons, like to family without permission or to the media, would require specific written consent.
Question 4: A BHT is approached by a law enforcement officer in the facility's lobby. The officer asks for the room number of a specific client. What is the BHT's most appropriate initial response?
- Provide the room number immediately to cooperate with law enforcement.
- Deny that the person is a client at the facility.
- State that they cannot confirm or deny whether that person is a client and refer the officer to a supervisor. (Correct answer)
- Ask the officer to wait while they go ask the client for permission to share the information.
Correct answer: State that they cannot confirm or deny whether that person is a client and refer the officer to a supervisor.
Even confirming that an individual is a client at a behavioral health facility is a disclosure of PHI. The BHT must protect client confidentiality and follow facility policy, which typically involves referring such requests to a designated privacy officer or supervisor who can verify the officer's legal authority (e.g., a warrant or court order) before releasing any information.
Question 5: Which of the following situations would require a BHT to act as a mandated reporter and break confidentiality?
- An adult client admits to having used illegal drugs in the past.
- A client expresses frustration and anger towards their spouse.
- A client discloses ongoing abuse of a child or a vulnerable adult. (Correct answer)
- Two clients are overheard having a minor disagreement.
Correct answer: A client discloses ongoing abuse of a child or a vulnerable adult.
All states have laws requiring certain professionals, including behavioral health staff, to report suspected cases of child abuse and neglect. Many states also have similar laws for the abuse of elderly or vulnerable adults. This is a legal requirement that overrides standard confidentiality rules.
Question 6: What is the primary purpose of the Health Insurance Portability and Accountability Act (HIPAA)?
- To ensure all healthcare workers receive the same salary.
- To set national standards for the protection of sensitive patient health information. (Correct answer)
- To allow insurance companies unrestricted access to all patient records.
- To mandate specific treatment protocols for behavioral health conditions.
Correct answer: To set national standards for the protection of sensitive patient health information.
The primary goal of HIPAA is to establish a national set of standards to protect the privacy and security of individuals' health information, known as Protected Health Information (PHI), while allowing the flow of health information needed to provide high-quality health care.
A Behavioral Health Technician (BHT) is part of a treatment team meeting.
Under the HIPAA Privacy Rule's 'minimum necessary' standard, which of the following actions is most appropriate?