The Coworker Who Shares Too Much
You are an MA at a multi-provider clinic. During a slow afternoon, a coworker at the front desk pulls up a patient's chart and reads aloud that the patient was recently treated for a sexually transmitted infection. Several patients are in the waiting room within earshot. The coworker laughs and says, 'Can you believe it? She's here every week.' You recognize the patient's name as someone you know from your neighborhood. Later that day, the coworker asks you to 'cover for her' and say she was at the front desk the whole time if the office manager asks, because she left early without clocking out. You are scheduled to work with her again tomorrow.
1. What are the privacy issues here, and what is your obligation?
Read the worked answer
The coworker's conduct is a privacy violation on multiple levels:
- She accessed and disclosed protected health information (PHI) without a treatment, payment, or operations purpose.
- She disclosed it in a public area where patients could overhear.
- She made a disparaging comment about the patient's frequency of visits.
Your obligation: you must not participate in or encourage the disclosure, and you should not repeat what you heard. You have a duty to report the incident through the practice's privacy/compliance channel. Reporting is not optional gossip - it is the mechanism that protects the patient and the practice. Document what you witnessed (who, what, when, where, who may have overheard) factually and without editorializing. Do not confront the coworker in front of patients.
2. The coworker asks you to lie about her attendance. How do you respond, and what do you do about tomorrow's shift?
Read the worked answer
Decline clearly: you will not misrepresent her attendance. Lying on her behalf would make you complicit in a timekeeping/falsification issue and would damage your own credibility.
What to do:
- Tell her plainly that you are not comfortable covering for her and that she should speak to the office manager herself.
- Do not promise to stay silent about the request; if asked by management, tell the truth.
- Regarding tomorrow's shift: you can still work professionally alongside her. Being polite is not the same as concealing misconduct. If her behavior toward you becomes retaliatory or hostile, report that too.
Separate the two issues: the privacy breach is a compliance matter to report now; the attendance request is an integrity matter you decline. Neither requires you to be unprofessional, and neither is yours to hide.