Which federal law provides privacy protections for health information?

• A. HIPAA
• B. FERPA
• C. GLBA
• D. COPPA

Answer: (A)

HIPAA is the federal law that provides privacy protections for health information. It creates rules for how protected health information (PHI) can be used and disclosed by covered entities—such as healthcare providers, health plans, and healthcare clearinghouses—and their business associates. The law also establishes individuals’ rights to access and obtain copies of their records, request corrections, and get notifications about disclosures. To protect PHI, HIPAA requires safeguards across administrative, physical, and technical measures and sets conditions for when disclosures are allowed, including requirements around breach notification.

Other laws cover privacy in different areas: FERPA protects student education records, GLBA guards nonpublic financial information held by financial institutions, and COPPA focuses on collecting information from children online.