Which action demonstrates compliance with HIPAA confidentiality regarding handwritten notes?

• A. Keep the notes in a locked drawer until they can be entered into the electronic file.
• B. Leave the notes visible at the desk for anyone to read.
• C. Share notes with someone not on the consumer's care team.
• D. Shred notes after check-in.

Answer: (A)

Protecting patient information requires physically safeguarding handwritten notes so only authorized staff can see them. Keeping handwritten notes in a locked drawer until they can be entered into the official electronic file demonstrates proper security: it prevents exposure, reduces risk of loss or theft, and ensures the notes are only accessible during an appropriate, defined window before they become part of the official record.

Leaving notes out where anyone can read them would expose PHI to unnecessary eyes. Sharing notes with someone not on the consumer’s care team bypasses the need-to-know principle and risks inappropriate disclosure. Shredding notes after check-in can be appropriate for disposal, but only after the notes have been accurately transferred to the consumer’s record; otherwise, important information could be lost or improperly discarded.