Which health privacy law governs patient health information and disclosure in the United States?

• A. FERPA
• B. ADA
• C. HIPAA
• D. HITECH

Answer: (C)

HIPAA is the health privacy law that protects patient health information and controls how it can be shared. It creates the Privacy Rule, which sets national standards for safeguarding protected health information and defines disclosures that are permitted without patient authorization, such as for treatment, payment, and health care operations. It also designates who must follow these rules—covered entities like healthcare providers, health plans, and their business associates—and establishes patients’ rights to access and request corrections to their records. HIPAA also requires safeguards and breach notification to ensure information is kept secure. While FERPA, ADA, and HITECH relate to privacy or civil rights in related areas, HIPAA specifically governs health information privacy and disclosure in the United States, making it the correct choice.