Problem
A nurse receives a phone call from a patient complaining of a cough. After accessing the patient record to send the physician a message, the nurse steps away from her workstation while patient health record stii visible to those not directly involved with patient care. As a result of the nurse not locking workstation, other patients coming and going can see protected health info.
Does the scenario violates a HIPAA security or privacy rule provide rational?