Which regulation governs patient privacy in the United States?

Which regulation governs patient privacy in the United States?

• A. HIPAA (Health Insurance Portability and Accountability Act)
• B. COBRA (Consolidated Omnibus Budget Reconciliation Act)
• C. FERPA (Family Educational Rights and Privacy Act)
• D. FMLA (Family and Medical Leave Act)

Answer: (A)

This question tests understanding of which regulation governs patient privacy in the United States. HIPAA, the Health Insurance Portability and Accountability Act, establishes the standards for safeguarding health information. It defines what counts as protected health information (PHI), governs how PHI can be used and disclosed by covered entities, and grants individuals rights to access and amend their records. It also requires safeguards—administrative, physical, and technical—to protect PHI and sets rules for breach notification. These provisions apply to covered entities such as health plans and healthcare providers that handle PHI, as well as their business associates. COBRA is about continuing health insurance coverage after certain qualifying events; it does not set privacy protections for medical records. FERPA protects the privacy of students’ education records in schools, not patient medical data. FMLA provides job-protected leave for family and medical reasons and does not govern privacy of health information.

This question tests understanding of which regulation governs patient privacy in the United States. HIPAA, the Health Insurance Portability and Accountability Act, establishes the standards for safeguarding health information. It defines what counts as protected health information (PHI), governs how PHI can be used and disclosed by covered entities, and grants individuals rights to access and amend their records. It also requires safeguards—administrative, physical, and technical—to protect PHI and sets rules for breach notification. These provisions apply to covered entities such as health plans and healthcare providers that handle PHI, as well as their business associates.

COBRA is about continuing health insurance coverage after certain qualifying events; it does not set privacy protections for medical records. FERPA protects the privacy of students’ education records in schools, not patient medical data. FMLA provides job-protected leave for family and medical reasons and does not govern privacy of health information.