Question

Which act requires organizations that retain health care information to use InfoSec mechanisms to protect this information, as well as policies and procedures to maintain them?

a. ECPA
b. Sarbanes-Oxley
c. HIPAA
d. Gramm-Leach-Bliley

Answer 1

Answer: c. HIPAA

Step-by-step explanation:

The Health Insurance Portability and Accountability Act (HIPAA) established criteria that specify general conditions for the protection of health data shared through electronic exchange.

The Privacy Rule establishes national rules to preserve people´s medical records, while the Security Rule introduces national standards for guarding the confidentiality and integrity of electronic preserved health data.