Hospital Security Practice Exam

HIPAA protects patient information through two main provisions that govern how PHI is handled: the Privacy Rule and the Security Rule. The Privacy Rule sets who may access PHI and what can be disclosed, outlining patients’ rights over their information and guiding how it can be used in any form. The Security Rule focuses on electronic PHI, requiring safeguards across administrative, physical, and technical controls to keep data confidential, accurate, and available. Together, they cover both how information is used and how it’s protected in digital systems. The Breach Notification Rule is important for responding after a breach, but it doesn’t establish the ongoing protections themselves, which is why the combination of privacy and security rules best fits the question.