The ______ provides federal protections for personal health information held by covered entities and gives patients an array of rights with respect to that information.

• A. FERPA policy
• B. HIPAA privacy policy
• C. GLBA policy
• D. HITECH policy

Answer: (B)

HIPAA Privacy Rule provides federal protections for personal health information held by covered entities and gives patients rights regarding that information. It applies to health plans, healthcare providers who transmit PHI electronically, and healthcare clearinghouses, setting rules for how PHI can be used and disclosed and requiring safeguards and a notice of privacy practices. It also grants patients rights such as access to their records, the ability to request amendments, and an accounting of disclosures. The other options don’t fit this description: FERPA relates to student education records, GLBA covers financial information, and HITECH strengthens HIPAA and expands privacy and security provisions, rather than defining the privacy protections themselves.