Case Study: Incidental disclosures and safeguards.

As a manager, you guided a group of high school students through your clinical laboratory during a field trip. You did not explain the laboratory's privacy policy to the teacher and students, because you thought they would have little access to PHI.

However during the tour, the students overheard names of patients and blood tests, saw laboratory reports laying on desks, and viewed test results on computer screens.

This is acceptable under the HIPAA Privacy Regulation since these were incidental disclosures that could not reasonably be prevented.

Select true or false