The HITECH Act and HIPAA Privacy and Security rules are intended to:

• A. Prevent access to PHI by unauthorized users
• B. Provide patients with greater access and control over their PHI
• C. Eliminate electronic PHI entirely
• D. Limit patient rights to view their PHI

Answer: (B)

These laws focus on giving patients greater access to and control over their PHI (protected health information). The HIPAA Privacy Rule establishes patient rights to inspect, obtain copies of, and request amendments to their PHI, and to limit certain disclosures. The HIPAA Security Rule requires safeguards to protect PHI in electronic form, and HITECH strengthens these protections by promoting the use of electronic health records and mandating breach notification. Together, they emphasize transparency and patient engagement by ensuring individuals can access and influence how their information is used. While safeguarding information is essential, the overarching aim is to empower patients with more access and control over their PHI, not to eliminate electronic PHI or restrict patient rights.