Needle-Stick Injury, Confidentiality and a Reluctant Source
A 24-year-old intern sustains a needle-stick injury while taking blood from a 41-year-old man admitted with pneumonia. The needle was used and the injury is a superficial prick to the left index finger, with a small amount of bleeding. The intern is hepatitis B vaccinated with a documented antibody titre above 10 mIU/mL. The patient's records show he is known to be HIV positive and on antiretroviral therapy with an undetectable viral load; he has not disclosed this to ward staff and has asked that it not be shared. The intern has not yet been told of the patient's status. The hospital has a needle-stick protocol, an occupational health service that opens at 9 a.m. (it is currently 2 a.m.), and a 24-hour emergency department. Post-exposure prophylaxis, if indicated, should ideally start within hours.
1. Analyse the competing ethical obligations in this situation and determine what information may be disclosed to the intern, and to whom.
Read the worked answer
Competing obligations:
- Confidentiality owed to the patient. His HIV status is sensitive personal health information; unauthorised disclosure is a breach of confidence and, in many jurisdictions, of data protection law. He has explicitly asked that it not be shared.
- Duty of care to the intern. The intern has a right to the information needed to make an informed decision about post-exposure prophylaxis and to protect her own health. This is a recognised exception to confidentiality where a person is at risk of serious harm.
- Public and staff safety. The occupational health service needs the information to manage the exposure properly.
- Respect for the patient's autonomy and dignity - disclosure should be limited to what is necessary.
Resolution:
- Confidentiality is not absolute. The standard approach is to disclose the minimum necessary information to the minimum necessary people. The intern does not need the patient's full medical history - she needs to know whether she has been exposed to a blood-borne virus so that prophylaxis can be considered.
- The correct route is through occupational health and the infection team, not through ward gossip. The patient should, where possible, be asked for consent to disclose the relevant information to the treating occupational health team. If he refuses, disclosure can still be justified because the risk of serious harm to the intern outweighs the duty of confidence, but it must be proportionate, documented, and limited.
- The patient should be informed that a needlestick has occurred and that relevant information may need to be shared with the occupational health team, unless doing so would itself cause serious harm.
- The intern should not be told the patient's diagnosis casually - the disclosure should occur in a confidential occupational health consultation with appropriate support.
Key principle: Confidentiality yields to a sufficiently serious risk of harm to an identifiable person, but only to the extent necessary, and with documentation.
2. The intern is anxious and asks the ward nurse whether the patient "has anything". What should the nurse and the treating team do, and what is the immediate clinical management of the exposure?
Read the worked answer
What the nurse and team should do:
- Do not answer the question on the ward. The nurse should not disclose the patient's status in a corridor or at the nurses' station. This protects both the patient's confidentiality and the intern's privacy.
- Escalate to the correct pathway: direct the intern to the emergency department and occupational health for assessment, and inform the on-call infection or occupational health physician so that a proper risk assessment and, if indicated, prophylaxis can begin.
- Support the intern - she is anxious and may be distressed; arrange for a colleague to accompany her and ensure she is not left alone to manage the incident.
- Document the exposure in the incident record.
Immediate clinical management of the exposure:
- First aid: wash the wound with soap and water; do not scrub or suck; allow it to bleed briefly. No caustic agents.
- Risk assessment: superficial percutaneous exposure from a hollow-bore needle with a small volume of blood - a low but non-zero risk. The source patient's undetectable viral load substantially reduces transmission risk, but does not eliminate it.
- Source testing: obtain consent for HIV, hepatitis B and C testing of the source where possible; if the patient is known HIV positive with undetectable viral load, this information is relevant and should be shared with the occupational health team.
- Hepatitis B: the intern is vaccinated with a protective titre, so no immunoglobulin or booster is required on the basis of the titre alone; confirm according to local protocol.
- HIV post-exposure prophylaxis: given a percutaneous exposure from a known HIV-positive source, PEP should be offered and started as soon as possible, ideally within hours and no later than 72 hours, even when the viral load is undetectable - guidelines generally recommend a three-drug regimen for 28 days. The decision should be made by the occupational health or infection physician, not by the intern alone.
- Follow-up: baseline and follow-up serology for HIV, hepatitis B and C at appropriate intervals; counselling and support.
3. The patient later asks whether the intern was told about his HIV status. How should the team respond, and what should be documented?
Read the worked answer
Response to the patient:
- Be honest and specific about what was shared and why. Explain that after a needlestick injury, the occupational health team needed to know whether there was a risk of blood-borne virus exposure so that the intern could be offered timely preventive treatment.
- Explain the limits of the disclosure - that information was shared only with the clinical team managing the exposure, not with the wider ward or with colleagues who did not need to know.
- Acknowledge his concern - he asked for confidentiality and that request was overridden in a limited way; it is reasonable for him to feel uneasy, and this should be acknowledged rather than dismissed.
- Explain the legal and ethical basis in plain terms: confidentiality can be breached where there is a serious risk to another person's health, and the disclosure was kept to the minimum necessary.
- Offer a route to raise concerns - the hospital's patient liaison or complaints process, and, where applicable, the data protection officer.
- Do not apologise in a way that implies wrongdoing where the disclosure was justified; instead, express regret that his preference could not be fully honoured and explain why.
Documentation:
- The needlestick incident - time, mechanism, wound, first aid.
- The risk assessment and the basis for the decision to disclose.
- Exactly what information was disclosed, to whom, when, and by whom.
- The patient's original request for confidentiality and the reasons it could not be fully maintained.
- The discussion with the patient afterwards, including his response and any concerns raised.
- The occupational health referral, PEP decision, and follow-up plan.
- Any escalation to the infection team, occupational health, or management.
Principle: Justified breaches of confidentiality must be transparent, minimal, documented, and explained to the patient - the documentation is what allows the team to demonstrate that the disclosure was proportionate.