Which act includes privacy and security rules to protect PHI?

Which act includes privacy and security rules to protect PHI?

• A. The Health Insurance Portability and Accountability Act, including privacy and security rules to protect PHI.
• B. A hospital accreditation standard.
• C. A clinical trial protocol.
• D. A patient safety standard for medication reconciliation.

Answer: (A)

Privacy and security rules to protect PHI come from HIPAA. The Privacy Rule sets the rules for how protected health information can be used and disclosed and grants patients rights over their data. The Security Rule requires covered entities and business associates to implement safeguards for electronic PHI, including access controls, encryption, audit controls, and risk management. Because PHI is any identifiable health information in any form—electronic, paper, or spoken—HIPAA provides the nationwide framework for protecting it across health care settings. Other options describe standards or protocols that don’t establish federal privacy protections.

Privacy and security rules to protect PHI come from HIPAA. The Privacy Rule sets the rules for how protected health information can be used and disclosed and grants patients rights over their data. The Security Rule requires covered entities and business associates to implement safeguards for electronic PHI, including access controls, encryption, audit controls, and risk management. Because PHI is any identifiable health information in any form—electronic, paper, or spoken—HIPAA provides the nationwide framework for protecting it across health care settings. Other options describe standards or protocols that don’t establish federal privacy protections.