The purpose of HITECH Act and HIPAA Privacy and Security rules is to provide patients with greater access and control over their PHI. Which option corresponds to this aim?

• A. Prevent access to PHI by unauthorized users
• B. Limit patient rights to view their PHI
• C. Provide patients with greater access and control over their PHI
• D. Eliminate electronic PHI entirely

Answer: (C)

Providing patients with greater access and control over their PHI is what HIPAA Privacy and Security rules and the HITECH Act are designed to support. The Privacy Rule establishes individuals’ rights to access their own health information, obtain copies, request amendments, and receive clear notices about how their data is used and shared. HITECH reinforces these rights in the electronic realm, promoting the use of electronic health records and patient portals so patients can view, download, and potentially transmit their PHI securely. This approach centers on empowering patients while maintaining strong protections against unauthorized access.

The other statements describe restricting or eliminating access or rights, which run counter to the purpose of these laws.