HIPAA protections apply to patient information in which forms?

• A. Oral only
• B. Written only
• C. Electronic only
• D. All forms

Answer: (D)

HIPAA protections apply to patient information in all forms: oral, written, and electronic. The Privacy Rule protects any protected health information that can identify a patient and relates to their health status, the care they receive, or payments for that care, regardless of how that information is stored or shared. So a whispered detail in a hallway, a paper chart, and an entry in an electronic health record all require the same privacy safeguards. This means access should be limited to those with a legitimate need, disclosures should follow the minimum necessary rule, and authorization is required for uses outside treatment, payment, or healthcare operations. In short, format doesn’t change the obligation to protect PHI.