Under HIPAA, patient privacy is protected by restricting access to medical records to authorized personnel.

• A. True
• B. False
• C. Only for minors
• D. Only inpatients

Answer: (A)

Access to medical records under HIPAA is restricted to authorized personnel who have a legitimate, job-related need to know PHI. This means access is granted based on role and the task at hand, not on who the patient is or where they are treated, and only the minimum amount of information needed is shared. Safeguards like role-based access, strict login controls, and audit trails help ensure that only those with a justified reason can view records. The rule applies to all patients, including minors and inpatients, so the statement is true.