Which of the following are ways health care workers and facilities conform to HIPPA regula-tions concerning securing patient confidentiality within electronic medical records?

1. Refraining from sharing passwords
2. Accessing electronic personal health information on a need-to-know basis
3. Utilizing thumbprint protected security
4. Allowing only close family members to view personal health information in the hospital com-puter
a. 1 and 2 only
b. 1, 3, and 4 only
c. 1, 2, and 3 only
d. 1, 2, 3, and 4

ANS: C
To emphasize two important points concerning electronic personal health information, users of hospital and respiratory care information management systems and researchers must refrain from sharing passwords and access personal health information only on a need-to-know basis. Some respiratory care information management systems, for example, now feature thumbprint protect-ed security.