Which federal regulation, effective April 14, 2003, affects privacy of health information?

• A. Joint Commission on Accreditation of Healthcare Organizations
• B. Patient Self-Determination Act
• C. Patient's Bill of Rights
• D. Health Insurance Portability and Accountability Act

Answer: (D)

The main concept here is federal protection of health information privacy. The regulation that fits is the Health Insurance Portability and Accountability Act, specifically the Privacy Rule, which became effective on April 14, 2003. This rule establishes national standards for safeguarding individuals’ medical records and other personal health information. It limits how health information can be used or disclosed without patient authorization, requires reasonable safeguards to protect confidentiality, and grants patients rights over their information, such as access to their records, the ability to request corrections, and an accounting of disclosures. It also defines what counts as protected health information and applies to covered entities like providers, health plans, and healthcare clearinghouses, as well as their business associates.

The other options do not fit because they are not federal privacy regulations: the JCAHO (an accrediting organization) influences standards but is not a federal law; the Patient Self-Determination Act focuses on advance directives and patient autonomy rather than privacy; the Patient’s Bill of Rights is a general concept of patient rights, not a federal privacy regulation.