Which regulation governs health data privacy?

• A. HIPAA governs health data privacy.
• B. HIPAA's privacy rule is primarily about patient consent.
• C. FERPA governs health data privacy.
• D. FOIA governs health data privacy.

Answer: (B)

Health data privacy is governed by HIPAA, specifically the Privacy Rule, which sets the standards for protecting individuals’ protected health information and for when that information can be used or disclosed. This rule identifies who is covered, requires safeguards to protect PHI, and grants people rights over their data—like accessing and correcting their records and controlling certain disclosures. It’s not simply about getting patient consent; while authorization is required for many disclosures outside the allowed categories, the Privacy Rule also permits many routine uses and disclosures without explicit patient consent for treatment, payment, and health care operations. FERPA governs student education records, not general health data; FOIA covers access to government records. So HIPAA is the framework that governs health data privacy.