The informatics nurse is involved with measures to protect security and confidentiality of patient data because:

• A. Both B and C are correct.
• B. It is a Joint Commission mandate.
• C. The major cause of security breaches is human error.
• D. It is regulated by HIPAA legislation.

Answer: (A)

Safeguarding patient data is driven by two practical realities. First, accreditation standards require organizations to protect confidentiality and information security, so healthcare settings implement policies, access controls, audits, and training to meet those expectations. Second, most security breaches arise from human error—phishing, weak passwords, misdirected information, or improper handling—so education and robust processes are essential to reduce these mistakes. Together, these factors explain why the best answer points to both the Joint Commission mandate and the role of human error as reasons to protect security and confidentiality. (HIPAA also imposes protections, but the question emphasizes the combination of accreditation requirements and human factors.)