Which rule establishes national standards for administrative, physical and technical safeguards for electronic PHI?

• A. NSF
• B. HIPAA Security Rule
• C. POTUS
• D. OSHA

Answer: (B)

Protecting electronic PHI relies on standardized safeguards across three areas: administrative, physical, and technical. The HIPAA Security Rule is the regulation that sets national standards for precisely these safeguards. It requires covered entities and business associates to implement administrative safeguards such as a security management process, regular risk analyses, and ongoing security training; physical safeguards like controlling facility and workstation access; and technical safeguards including access controls, audit controls, data integrity measures, authentication, and transmission security. This rule directly targets how electronic PHI is protected in all stages—from creation to transmission and storage.

Other options don’t address the protection of electronic PHI in a healthcare context. NSF relates to science funding and research policies, POTUS refers to the President, and OSHA covers workplace safety rather than health information privacy and security.