Which statement best describes the purpose of HIPAA's Privacy Rule?

• A. Expand health coverage to all citizens
• B. Establish federal protections from personally identifiable health information
• C. Set physician licensing
• D. Regulate hospital nutrition

Answer: (B)

HIPAA's Privacy Rule is about protecting patients' identifiable health information and controlling how that information is used and shared. It sets federal standards that apply to covered entities and business associates, limiting who can access PHI and under what circumstances, while giving patients rights to access, request corrections, and receive notices about how their information is used. It also allows necessary disclosures for treatment, payment, and healthcare operations, but only to the extent needed (the minimum necessary rule). This focus on privacy and safeguarding identifiable health data is what makes the statement describing federal protections for personally identifiable health information the correct description. The other options describe things outside the Privacy Rule’s purpose—expanding health coverage, licensing physicians, and regulating hospital nutrition are not functions of the HIPAA Privacy Rule.