— 照護管理 · MEDIUM · MCQ —
下列哪項敘述正確描述了符合 HIPAA（健康保險可攜與責任法）政策的目的？
Which of the following describes the purpose of a HIPAA (Health Insurance Portability and Accountability Act) compliant facility policy?
- ATo allow public access to medical records允許公眾存取病歷
- BTo prevent physicians from accessing patient charts防止醫師存取病患病歷
- CTo force employees to share information freely強制員工自由分享資訊
- DTo ensure the privacy and security of patient health information✓ 正解確保病患健康資訊的隱私與安全
— Explanation · 中文詳解 —
HIPAA 是美國醫療資訊隱私法的核心，旨在保障病人健康隱私（PHIs）的安全性與機密性。這規範了醫療單位如何儲存、處理與分享病人的紀錄，確保只有授權的醫護人員在臨床必要時才能接觸資訊，防止隱私外洩。
HIPAA is the cornerstone of medical information privacy law in the United States, aimed at protecting the security and confidentiality of patients' protected health information (PHI). It governs how health care entities store, handle, and share patient records, ensuring that only authorized health care providers may access information when clinically necessary, thereby preventing privacy breaches.
✦ 台美臨床差異
美國 HIPAA 法規極嚴；台灣對應為「個人資料保護法」與「醫療法」，醫療資訊保護同樣受到嚴格規範。