Which regulation addresses privacy and disclosure of health information?

• A. Americans with Disabilities Act
• B. Infection Control
• C. Bloodborne Pathogens
• D. Health Insurance Portability and Accountability Act (HIPAA)

Answer: (D)

HIPAA addresses privacy and disclosure of health information. It sets how patient health information (PHI) can be used and shared, who may access it, and patients’ rights to access or correct their records. The Privacy Rule limits disclosures to the minimum necessary and outlines when information can be shared without patient authorization (for treatment, payment, or healthcare operations, and as required by law). The Security Rule adds safeguards for electronic PHI, ensuring data is protected in digital form. In the prehospital setting, this means EMS personnel should share patient information only with those involved in care or operations and only as much as needed, protecting confidentiality unless disclosure is specifically permitted or required. The other options don’t govern privacy or the disclosure of health information: the Americans with Disabilities Act focuses on rights related to disability, infection control deals with preventing the spread of infections, and the Bloodborne Pathogens Standard addresses worker safety and exposure control.