Which law governs the privacy of patient health information in healthcare?

• A. OSHA
• B. HIPAA
• C. FERPA
• D. ADA

Answer: (B)

HIPAA governs the privacy of patient health information. The Health Insurance Portability and Accountability Act created the Privacy Rule and Security Rule to protect PHI—any identifiable information related to a patient’s health, care, or payment for care—whether it’s stored, transmitted, or spoken about. It applies to covered entities like clinicians, hospitals, health plans, and their business associates, and it gives patients rights to access their records, request corrections, and receive notices about how their information is used, while requiring limits on disclosures to the minimum necessary. The other options don’t address health information privacy: OSHA focuses on workplace safety, FERPA on student education records, and the ADA on disability rights and accessibility.