Which term best describes the physical and electronic protection of health information?

• A. Access
• B. Confidentiality
• C. Privacy
• D. Security

Answer: (C)

The main idea is information security—the set of safeguards that protect health information and the systems that store, process, and transmit it. Security covers both physical protections (such as locked facilities, secured devices, and controlled access to rooms and cabinets) and electronic protections (like authentication, access controls, encryption, monitoring, and secure backups). Together, these measures prevent unauthorized access, disclosure, alteration, or destruction of data and help ensure data is available to authorized users when needed.

Confidentiality is related because it concerns preventing unauthorized disclosure of information, but it’s a specific objective within the broader protective framework. Privacy deals with individuals’ rights and control over how their information is collected and used, rather than the protective measures themselves. Access describes who is permitted to view or use data, not the comprehensive safeguards in place. For protecting health information in both physical and electronic forms, security best captures the overall protection.