Which regulation governs patient privacy in the United States healthcare system?

• A. OSHA (Occupational Safety and Health Administration)
• B. FDA (Food and Drug Administration)
• C. ADA (Americans with Disabilities Act)
• D. HIPAA (Health Insurance Portability and Accountability Act)

Answer: (D)

Patient privacy in the U.S. healthcare system is governed by HIPAA, which sets national standards to protect individuals’ health information. It introduces the Privacy Rule, which limits how protected health information (PHI) can be used or disclosed by covered entities such as healthcare providers, health plans, and healthcare clearinghouses, and it gives patients rights to access and control their own records. The Security Rule complements this by specifying safeguards—administrative, physical, and technical—to protect electronic PHI. HIPAA aims to enable necessary sharing of health information for treatment and operations while preserving confidentiality. In contrast, OSHA focuses on workplace safety, the FDA regulates foods, drugs, and medical devices, and the ADA addresses accessibility and anti-discrimination for people with disabilities; none of these primarily govern patient privacy.