Can you call a patient by first and last name?

Editorial team Published on

Yes, healthcare providers can call a patient by their first and last name in a waiting room or clinical setting, and it does not violate the U.S. Department of Health and Human Services HIPAA rules as long as reasonable safeguards are used.

HIPAA Rules on Calling Names

  • Incidental Disclosures: Other people in a public waiting area might overhear a name, but this is considered an unavoidable, permitted incidental disclosure during routine treatment operations.
  • Minimum Necessary Standard: Providers should keep announcements brief and neutral. They should avoid mentioning medical conditions, specific treatments, or clinical departments.
  • Best Practices: Many clinics use a first name and last initial, a first name only, or a queue number to further protect patient privacy, though using a full name is still legally compliant.

Do you call patients by first or last name?

Healthcare providers use both first and last names depending on the setting, the patient's age, and personal preference.

Formal Approach (Last Name)

  • First meeting: Many doctors and nurses start by using a formal title like Mr. or Ms. plus the last name (e.g., "Mr. Smith").
  • Respect and boundaries: This shows respect and keeps a professional boundary, especially with older adults.
  • The safe rule: Providers often stick to last names until the patient says it is okay to use their first name.

Informal Approach (First Name)

  • Building comfort: Many patients, especially those under 65, prefer being called by their first name because it feels warmer and less cold.
  • Established relationships: When a doctor and patient know each other well after many visits, they almost always switch to first names.
  • Pediatrics: Pediatricians and pediatric nurses almost always use first names or playful titles with children.

Best Practice

  • Ask the patient: The best approach is to ask on the first visit, "How would you like me to address you?" and record the preference in the chart.

Is it a HIPAA violation to call a patient by first and last name?

No, calling a patient by their first and last name in a waiting room is generally not a HIPAA violation, as it is considered an allowable incidental disclosure under the Department of Health and Human Services (HHS) Privacy Rule.

The Rules on Calling Names

  • Permitted Action: The HIPAA Privacy Rule allows medical offices to call patient names aloud to let people know it is time for their appointment or treatment.
  • Reasonable Safeguards: Providers must still use basic caution and keep disclosures limited to what is necessary.
  • No Extra Details: Staff must never share medical details, reasons for the visit, or private data when calling a name aloud.

Best Practices for Offices

  • First Name Only: Many clinics prefer using just a first name or a first name and a last initial (like "Susan M.") to provide an extra layer of privacy.
  • Special Settings: For sensitive care areas like mental health clinics or addiction treatment centers, staff should take extra care to reduce unnecessary name-calling in public spaces.

Is it okay to call a Doctor by their first name?

It is generally not okay to call a doctor by their first name unless they explicitly invite you to do so.

Etiquette and Respect

  • Default to "Doctor": Always start by addressing a physician as "Dr. [Last Name]" to show respect for their extensive training and professional role.
  • Wait for permission: Some physicians prefer a casual environment and may say, "Call me [First Name]". Wait until they offer this option before using their first name.

Important Nuances

  • Gender bias: Studies show that patients—especially male patients—are significantly more likely to call female doctors by their first names without permission. This informal approach can undermine a female physician's authority and professional standing.
  • Cultural differences: Norms vary by region. While casual first-name use is common in everyday workplaces in some countries, formal titles remain the strict standard in American and British clinical settings.

Do people call nurses by their first or last name?

Nurses typically go by their first name when interacting with patients and coworkers.

Why Nurses Use First Names

  • Approachability: Using a first name helps build a comfortable and caring relationship with patients.
  • Safety and Privacy: Many nurses avoid sharing their last names with patients to protect their personal privacy and safety, especially in high-stress areas like emergency rooms or psychiatric units.
  • Workplace Culture: Most modern healthcare settings lean toward a casual and collaborative environment where staff members address each other by their first names.

Exceptions and Variations

  • ID Badges: Hospital policies vary. Some facilities require full legal names and credentials on identification badges for transparency, while others allow first names only for staff protection.
  • School Settings: School nurses are often addressed by students as "Nurse [First Name]" or "Ms. [First Name]" to remain friendly yet professional.
  • Formal Traditions: Historically, nurses were addressed more formally by their last name or titles, though this is rare in modern practice.

Reacting to Kids Who Call Their Parents by FIRST NAME!

9 related questions found

Is it unprofessional to call someone by their first name?

Calling someone by their first name is generally not unprofessional in modern Western corporate environments, but it depends heavily on context, culture, and hierarchy.

When It Is Appropriate

  • Western Corporate Culture: In the U.S. and many Western workplaces, using first names—even for managers and executives—is the norm and signals approachability and collaboration.
  • Explicit Permission: If someone introduces themselves by their first name or asks you to use it, using a formal title instead can actually feel awkward or overly stiff.
  • Peer Relationships: Colleagues at the same level almost always address each other by their first names.

When It Can Be Unprofessional or Rude

  • Formal or Hierarchical Settings: When first meeting senior executives, older clients, or authorities in more traditional or non-Western cultures, defaulting to a formal title (Mr., Ms., Dr.) is safer and expected.
  • Academic/Medical Roles: Addressing professors or doctors by their first name without an explicit invitation can be seen as disrespectful.
  • Unearned Familiarity: Jumping straight to a casual nickname or overly informal tone before establishing rapport can backfire.

Best Practices

  • Take Cues: Observe how others in the workplace or meeting address the person.
  • Start Formal: When in doubt, start with a formal title and let the other person invite you to use their first name.
  • When Unsure, Ask: If you are worried about overstepping, a polite "How would you like me to address you?" resolves any doubt.

What is the proper way to call a nurse?

The proper way to call a nurse in a medical setting is to press your bedside call button or politely address them by their preferred name or title.

Getting a Nurse's Attention

  • Use the call bell: Press the call button near your bed once. Wait for an intercom response or for a nurse to enter your room.
  • Keep requests clear: State what you need right away in a calm and direct voice.
  • Avoid yelling: Do not shout down the hallway unless it is an absolute emergency.

How to Address a Nurse

  • First name: Use the nurse's first name if they introduced themselves that way. Most modern healthcare workers prefer this.
  • "Nurse": Use "Nurse" or "Nurse [Last Name]" as a respectful default if you do not know their name.
  • Nurse Practitioners: Call a Nurse Practitioner "Nurse Practitioner" or "NP," not "Doctor," unless they have a doctorate and specifically asked to be called Dr.
  • You can read more formal etiquettes in WikiHow's Guide to Addressing Nurses.

What is the new HIPAA rule in 2026?

The main new HIPAA requirement for 2026 is updating privacy notices under the HHS Model Notices of Privacy Practices to include stricter protections for substance use disorder (SUD) patient records.

Key 2026 Privacy Rule Updates

  • February 16, 2026 Deadline: Healthcare providers and health plans had to update their Notice of Privacy Practices (NPP).
  • Substance Use Records: Notices must now explain how substance use disorder records are protected under 42 CFR Part 2.
  • Legal Protections: Patient records generally cannot be used in civil or criminal legal cases without explicit consent or a court order.
  • Patient Rights: Patients gained clearer rights to restrict sharing, opt out of fundraising, and file complaints.

Proposed Security Rule Changes (Under Review)

Regulators are also pushing a major update to the HIPAA Security Rule that changes how organizations handle data safety:

  • No More "Addressable" Rules: Optional security steps are becoming mandatory.
  • Mandatory MFA: Multi-factor authentication is required across all systems.
  • Required Encryption: Patient data must be encrypted both in transit and at rest.

What are the top 5 HIPAA violations?

The top 5 most common HIPAA violations involve failing to protect patient data through unauthorized access, weak safeguards, or delayed notifications.

1. Unauthorized Access to Patient Records

  • What it is: Staff members viewing Protected Health Information (PHI) out of curiosity or without a direct clinical need.
  • Example: Looking up the medical chart of a coworker, family member, or celebrity.

2. Theft or Loss of Unencrypted Devices

  • What it is: Laptops, phones, or USB drives containing electronic PHI (ePHI) going missing without proper encryption.
  • Example: Leaving a portable hard drive in an unlocked car where it gets stolen.

3. Lack of an Enterprise Risk Analysis

  • What it is: Failing to conduct regular, thorough security reviews of organizational systems and vulnerabilities.
  • Example: Not checking software or networks for security gaps that later lead to ransomware attacks.

4. Improper Disposal of Patient Records

  • What it is: Tossing physical paper files or un-wiped electronic media straight into standard trash or recycling bins.
  • Example: Putting printed daily appointment schedules into an open office dumpster.

5. Failure to Issue Timely Breach Notifications

  • What it is: Failing to notify affected individuals, the government, or the media within the mandatory 60-day window following a discovered data breach.
  • Example: Waiting six months to tell patients that their health records were exposed in a cyberattack.

Is first and last name alone considered PHI?

A first and last name is considered Protected Health Information (PHI) under HIPAA only when it is connected to health or payment data by a healthcare provider, health plan, or business associate.

Context Rules for Names as PHI

  • When it IS PHI: A name (first, last, or full) becomes PHI the moment it appears alongside medical records, diagnoses, appointment logs, billing information, or any other health data.
  • When it IS NOT PHI: A person's name by itself—outside of a medical or healthcare context (such as on a general mailing list or written on a coffee cup at a hospital café)—is not protected health information under HIPAA.