Define the audience first
A bedside teaching discussion, an internal quality meeting, a classroom presentation and a public conference are different uses of patient information. Before preparing slides, identify the audience and the authority for using the case in that setting. Do not assume that permission for one setting follows the material into another.
HHS’s HIPAA summary distinguishes uses and disclosures permitted or required by the rule from those that need a valid authorization. Its de-identification guidance also explains why simply removing a name is insufficient. The organization’s privacy process should resolve the applicable route for the actual presentation.
Choose the least identifying useful case
Start with the teaching question. If the aim is to discuss a communication failure, the exact admission date, employer, neighborhood and family configuration may add little educational value. A fictional example can sometimes teach the same reasoning without using a real encounter.
When a real case is necessary, have the appropriate reviewer evaluate the complete presentation, including speaker notes, images, file names and handouts. Avoid assuming that a cropped image is automatically safe. Check what remains visible and whether the surrounding narrative makes the person recognizable.
A useful planning list includes:
- Intended audience and whether attendance is restricted.
- Whether the session will be recorded or streamed.
- The approved basis for using the information.
- The source and authorization for images or quotations.
- Where slides and recordings will be stored or shared.
- Who handles requests for copies afterward.
Do not confuse alteration with formal de-identification
HHS describes two HIPAA methods: expert determination and Safe Harbor. Safe Harbor requires removal of the specified identifiers and no actual knowledge by the covered entity that the remaining information could identify the person, alone or together with other information. These are defined methods; replacing a name with a label does not establish that either has been satisfied.
In a fictional presentation exercise, replacing a patient’s name with “Case A” leaves a distinctive event and exact date intact. The reviewer should assess the complete combination rather than approve the slide because the name is gone. If details are changed for a teaching example, label the example accordingly and avoid presenting the altered story as a precise clinical record.
Protect the discussion after the slides
Plan how to answer questions that request additional identifying information. A simple response can bring the discussion back to the educational point without expanding the disclosure. Ask attendees to use the same boundaries in their own examples.
If the audience or distribution plan changes, obtain another review. An approved internal deck should not automatically become a public download. Afterward, follow the agreed storage and retention process for the material.
The article on patient privacy in nursing education addresses student access; social-media boundaries addresses informal sharing outside a planned teaching process.
Sources
- HHS: Summary of the HIPAA Privacy Rule (accessed 2026-09-17).
- HHS: Guidance on De-identification of Protected Health Information (accessed 2026-09-17).