Which statement best describes the relationship between HIPAA and HITECH?

• A. HIPAA predates HITECH and HITECH broadens protections
• B. HITECH replaces HIPAA
• C. They are unrelated
• D. HIPAA was created after HITECH

Answer: (A)

HIPAA sets the baseline for protecting health information, and HITECH builds on it rather than replacing it. HIPAA, enacted in 1996, established national standards for protecting privacy and securing health data. HITECH, introduced in 2009 as part of the stimulus legislation, strengthens those protections by expanding requirements to business associates, increasing penalties for violations, and introducing breach notification rules. Because HITECH came after HIPAA and reinforces and broadened its protections, the relationship is that HITECH broadens HIPAA’s reach and enforcement, not that it replaces HIPAA or that they are unrelated.