The privacy standards of HIPAA require all of the following except which?

• A. Patients must sign a consent form to allow a birth or death certificate to be recorded by a government agency
• B. Patients' information must be kept confidential and shared only with authorized individuals
• C. Access to medical records is restricted to authorized personnel
• D. Patients have the right to request corrections to their records

Answer: (A)

HIPAA’s privacy standards are all about protecting a patient’s health information and limiting how it’s shared. It requires keeping information confidential, sharing it only with people who have authorization, restricting access to those who need to know, and upholding patients’ rights such as requesting corrections to their records. Recording a birth or death certificate by a government agency falls outside the protection of HIPAA because vital records are handled under state laws and public-record processes. Because of that, a consent form from the patient isn’t required for government agencies to record vital records, which is why this option is the exception. The other points reflect HIPAA’s protections: confidentiality, access controls, and patient rights.