The mother of a 45-year-old patient is a retired physician and requests to discuss the patient's plan of care with the nurse caring for the patient.What is the nurse's best response to this request?

A) "I will need to ask permission from my supervisor before I can share that information."
B) "I will show you the chart, just follow me and we can discuss your questions and concerns."
C) "I would suggest that you leave me out of your family problems. I am here to care for the patient."
D) "I will have to get the patient's permission before I can share that information."

Even family members or friends of the patient are not permitted access to the patient's personal health information without the patient's consent.Federal legislation known as HIPAA (Health Insurance Portability and Accountability Act of 1996)requires that those with access to personal health information not disclose the information to a third party without patient consent.The nurse does not need to ask permission from the supervisor because HIPAA laws state what the nurse can do."I would suggest that you leave me out of your family problems" is inappropriate because it ignores the request of the family member.Showing the chart and discussing the care is a violation of HIPAA.