Under HIPAA, which one of the following statements is true regarding the release of PHI by covered entities to business associates?
A. Covered entities must require adequate assurances in writing that business associates will adequately safeguard PHI.
B. Covered entities are responsible for the use of PHI made by business associates.
C. Covered entities aren't allowed to release PHI (identifiable or de-identified) to business entities.
D. Once a covered entity releases information to a business associate, the associate may disclose that information to other entities.
C. Covered entities aren't allowed to release PHI (identifiable or de-identified) to business entities. HIPAA is supposed to protect the unauthorized (by you) release of PHI to anyone who doesn't have a need to know, including healthcare colleagues. [ ]
Question
Asked 10/22/2011 11:38:10 AM
0 Answers/Comments
This answer has been confirmed as correct and helpful.
Rating
There are no new answers.
