Which act is designed to protect health information held by covered entities and ensure patient rights to that information?

Which act is designed to protect health information held by covered entities and ensure patient rights to that information?

• A. FISMA
• B. GLBA
• C. HIPAA
• D. SOX

Answer: (C)

HIPAA is the law that governs how health information is protected and how patients can control their records. It sets national standards for safeguarding health information held by covered entities—such as healthcare providers, health plans, and healthcare clearinghouses—and their business associates. The Privacy Rule limits how PHI can be used and disclosed and gives patients rights to access, inspect, and request corrections to their records. The Security Rule requires safeguards to protect electronic PHI, and the Breach Notification Rule requires disclosure if a breach occurs. In short, HIPAA ensures both the privacy and security of health information and the patient rights to that information. Other acts address different areas—FISMA focuses on federal information systems, GLBA on financial privacy, and SOX on corporate financial reporting.

HIPAA is the law that governs how health information is protected and how patients can control their records. It sets national standards for safeguarding health information held by covered entities—such as healthcare providers, health plans, and healthcare clearinghouses—and their business associates. The Privacy Rule limits how PHI can be used and disclosed and gives patients rights to access, inspect, and request corrections to their records. The Security Rule requires safeguards to protect electronic PHI, and the Breach Notification Rule requires disclosure if a breach occurs. In short, HIPAA ensures both the privacy and security of health information and the patient rights to that information. Other acts address different areas—FISMA focuses on federal information systems, GLBA on financial privacy, and SOX on corporate financial reporting.