Which two federal regulations and standards should healthcare security officers be aware of?

• A. FERPA and GLBA
• B. FDA and EPA
• C. FTC and FLSA
• D. OSHA and HIPAA

Answer: (D)

The main idea is that hospital security officers must navigate the rules that cover both safe operations and patient information protection. OSHA sets the standards for workplace safety, requiring training, hazard communication, safe handling of risks, and emergency planning. In a hospital, this translates to creating secure, safe environments for patients and staff, controlling access points safely, and responding to incidents in a way that minimizes harm.

HIPAA governs how patient information is protected. Its Privacy and Security Rules require safeguards—administrative, physical, and technical—to protect PHI and ePHI, control who can access records, secure electronic systems, keep proper audit trails, and manage breach notifications. For security officers, this informs how to handle access control, surveillance, incident response, and precautions that prevent privacy violations.

The other options don’t align as directly with a hospital security role—those relate more to education, financial data, drugs/food, or general labor and consumer protections—whereas OSHA and HIPAA specifically address workplace safety and patient information protection in healthcare settings.