Which type of information is protected under HIPAA privacy policy?

• A. Educational records
• B. Criminal history
• C. Personal health information
• D. Financial data

Answer: (C)

HIPAA privacy policy protects personal health information, or PHI. This covers any individually identifiable health information related to a person’s past, present, or future health condition or care, and it can be in electronic, paper, or oral form. Examples include a patient’s name, address, medical history, diagnoses, treatment notes, lab results, and billing information—anything that ties health details to the person. The rule exists to keep health information confidential, allowing disclosures only for specific purposes like treatment, payment, or healthcare operations, or with patient authorization. Other types of information, such as educational records or purely financial data, fall under different laws and aren’t protected by HIPAA in the same way.