HIPAA was designed to protect patients from disclosure of protected oral, written or electronic health information.

HIPAA was designed to protect patients from disclosure of protected oral, written or electronic health information.

• A. True
• B. False
• C. Not applicable
• D. Not sure

Answer: (A)

HIPAA protects patient health information in any format—oral, written, or electronic—from improper disclosure. It does this through the Privacy Rule, which controls who may access PHI and under what circumstances, and the Security Rule, which requires safeguards for electronic PHI. Covered entities like health plans, providers, and clearinghouses (and their business associates) must limit disclosures to authorized purposes such as treatment, payment, and health care operations, unless the patient provides consent or a legal exception applies. Because PHI must be protected across all formats, the statement is true. Saying false or not applicable would miss that HIPAA covers information in every form, and not sure isn’t appropriate because HIPAA does apply.

HIPAA protects patient health information in any format—oral, written, or electronic—from improper disclosure. It does this through the Privacy Rule, which controls who may access PHI and under what circumstances, and the Security Rule, which requires safeguards for electronic PHI. Covered entities like health plans, providers, and clearinghouses (and their business associates) must limit disclosures to authorized purposes such as treatment, payment, and health care operations, unless the patient provides consent or a legal exception applies. Because PHI must be protected across all formats, the statement is true. Saying false or not applicable would miss that HIPAA covers information in every form, and not sure isn’t appropriate because HIPAA does apply.