Which regulation governs the protection of health information and includes privacy and security rules?

• A. OIG Act
• B. FERPA
• C. HIPAA
• D. HITECH

Answer: (C)

HIPAA governs the protection of health information. It establishes the Privacy Rule, which limits how protected health information can be used or disclosed, and the Security Rule, which sets required safeguards for protecting electronic protected health information. While HITECH later strengthened HIPAA’s enforcement and added breach-notification requirements, the regulation that covers privacy and security of health data is HIPAA. The other options don’t fit: the OIG Act focuses on enforcement and oversight rather than privacy rules, FERPA protects student educational records rather than health information, and HITECH is an amendment to HIPAA rather than a standalone privacy regulation.