A nurse witnesses another staff member sharing a client's diagnosis with a visitor who is not authorized to receive that information. What should the nurse do?

HIPAA AND CONFIDENTIALITY: HIPAA (Health Insurance Portability and Accountability Act) protects client health information — disclosing protected health information (PHI) to unauthorized individuals is a violation. NURSE'S RESPONSE: Recognize the breach; intervene to stop the unauthorized disclosure if in progress (discreetly); report through proper channels (supervisor, privacy officer, per facility policy); CONFIDENTIALITY PRINCIPLES: Share PHI only with authorized individuals and only on a need-to-know basis; verify authorization before disclosing to family/visitors; clients designate who may receive their information; AVOID: discussing clients in public areas (elevators, hallways, cafeteria); accessing records of clients you're not caring for; sharing on social media (serious violation); leaving records/screens visible; CONSEQUENCES of violations: disciplinary action, fines, license consequences, legal liability; EXCEPTIONS to confidentiality: mandatory reporting (abuse, certain communicable diseases), court orders, imminent danger; LPN role: protect client confidentiality, recognize and report breaches, model HIPAA-compliant behavior.