Which practice best supports confidentiality when handling patient health information (PHI)?

• A. Shred unneeded PHI after use to prevent disclosure.
• B. Share PHI with anyone who asks.
• C. Leave PHI unsecured on desks.
• D. Post PHI publicly for easy access.

Answer: (A)

Protecting confidentiality of patient health information means preventing unauthorized access or disclosure. The most effective practice is to shred unneeded PHI after use. Secure destruction of physical documents containing identifiable health data minimizes the chance that sensitive information can be retrieved from trash or recycling, reducing the risk of a breach. This supports the need-to-know principle and aligns with privacy obligations and professional ethics. By contrast, sharing PHI with anyone who asks, leaving PHI unsecured on desks, or posting PHI publicly create clear opportunities for disclosure and violate confidentiality. In daily practice, limit access to PHI to those who need it, store records in locked places, log off systems, and use a shredder for disposal.