Which statement best distinguishes confidentiality from privacy, and which scenario illustrates a breach?

• A. Confidentiality is protecting information; privacy is controlling access to personal information. Breach example: discussing a patient’s diagnosis in a public area where others can overhear.
• B. Privacy is protecting information; confidentiality is controlling access; breach example: discussing in a private room.
• C. Confidentiality and privacy are identical concepts.
• D. A breach occurs only when records are stolen outside the facility.

Answer: (A)

Confidentiality is the professional duty to protect information a patient has shared, while privacy is the patient’s right to control access to themselves and their personal information. In practice, confidentiality focuses on preventing unauthorized disclosure of details, and privacy emphasizes respecting the patient’s ownership over what information is shared and with whom.

The described situation shows a breach because discussing a patient’s diagnosis in a public area allows others to overhear sensitive information, violating both confidentiality (the information is exposed without authorization) and privacy (the patient’s control over personal information and who knows it is ignored). The other options misstate these definitions or the nature of a breach—for example, mixing up which concept protects information versus who may access it, or suggesting breaches only occur outside the facility.