3 Client Rights and Ethical Practice

Foundations of client rights

Ethical care respects each client’s dignity, choices, safety, and control over personal information. Federal protections such as HIPAA establish important baselines in the United States, while state law, professional standards, and setting-specific rules may add requirements. Rights and procedures can therefore vary by location and care setting.

Rights, participation, and refusal

Clients should receive respectful care without unlawful discrimination, abuse, or harassment. In hospitals participating in Medicare or Medicaid, federal regulations recognize rights that include participating in care planning, making informed decisions, requesting or refusing treatment, formulating Advance directives, receiving care in a safe setting, and maintaining personal privacy and confidentiality of clinical records. Hospital patients also have rights to access their records and use the hospital’s grievance process. These hospital-specific requirements do not describe every right in every setting.

A client may refuse a recommended intervention, but that does not require a provider to deliver care considered medically unnecessary or inappropriate. The care team should explain relevant consequences, explore the client’s concerns, consider appropriate alternatives, and document the discussion and decision. Staff should not pressure or punish a client for making an informed choice.

Consent and decision-making

Informed consent is a communication process, not merely a signed form. Before a treatment or procedure, the responsible clinician explains the known diagnosis, the proposed intervention and its purpose, significant expected benefits and risks, and reasonable alternatives, including no treatment. The clinician answers the client’s questions, and the client’s agreement must be voluntary and based on information they can understand.

Use qualified language assistance or other communication supports when needed. Silence or confusion is not agreement. Document the discussion and decision according to law and facility policy.

Decision-making capacity is specific to the decision and circumstances. A diagnosis or disability alone does not establish that a person cannot decide. If a client lacks capacity for a particular decision, identify the legally authorized Surrogate under applicable law and involve the client as much as possible.

In an emergency, urgent treatment may proceed under applicable emergency rules when the client cannot decide and no surrogate is available. Explain the care and seek consent for ongoing treatment as soon as practicable.

For example, when a client declines a procedure after hearing its risks and alternatives, the clinician checks understanding, asks what matters to the client, discusses suitable options, and records the informed refusal and follow-up plan.

Privacy and information sharing

Privacy concerns a person’s control over access to their body, personal space, and information. Confidentiality is the professional and legal duty to protect information learned in care from improper access or disclosure. Respect privacy during examinations and conversations, use secure systems, protect screens and papers, and discuss client information only with people who need it for their role.

HIPAA applies to covered health plans, clearinghouses, and certain health care providers, and sets rules for protected health information. It allows many disclosures for treatment without separate written authorization, but it does not mean every worker may view any record. Access should follow role-based permissions and organizational policy. The Minimum-necessary rule applies to many uses and disclosures, but not to provider-to-provider disclosures for treatment.

HIPAA generally permits relevant information to be shared with family or friends involved in a client’s care when the client agrees, does not object after an opportunity, or the circumstances reasonably indicate no objection. If the client is absent or incapacitated, a provider may share relevant information when professional judgment indicates it is in the client’s best interest. Share only information directly relevant to that person’s involvement; family status alone does not automatically authorize access. More protective state or specialized laws may also apply.

Client access and communication preferences

Clients have HIPAA rights that include requesting access to health information in designated records and asking for corrections, subject to limited exceptions. They may request certain restrictions or alternative ways to receive communications, although a provider does not have to agree to every restriction request. Clients can raise privacy concerns with the organization and, in applicable cases, with the U.S. Department of Health and Human Services.

For example, if a client asks staff not to leave messages at a shared home phone, follow the organization’s process for confidential-communication requests, record the preferred contact method, and use it when practicable.

Ethical responsibilities in practice

Ethical practice puts respect for rights into everyday conduct. Health professionals should:

• Respect autonomy: support informed choices and honor a capable client’s decisions, including refusal.

• Promote benefit and prevent harm: recommend appropriate care, reduce avoidable risks, and raise safety concerns.

• Act fairly: provide respectful care and avoid bias or unequal treatment.

• Be honest and accountable: communicate accurately, work within professional scope, document objectively, and acknowledge and report errors or unsafe conditions through appropriate channels.

• Protect trust: maintain professional boundaries and safeguard private information, including in electronic communication and public settings.

• Advocate: help clients understand options, express preferences, access appropriate communication support, and have concerns addressed.

When a client’s expressed wishes, safety needs, family requests, or team recommendations conflict, clarify the facts and the client’s goals, consult the appropriate clinician or supervisor, and follow applicable law and policy. Share information only through authorized channels and document relevant decisions and escalation. Privacy, confidentiality, dignity, and advocacy are core professional responsibilities in care.