Which principle does HIPAA require regarding resident information?

• A. Confidentiality; only authorized personnel may access or share information; protect privacy.
• B. Information can be shared with anyone as long as it's about patient care.
• C. Privacy protections apply only to electronic records.
• D. Residents must sign all disclosures themselves.

Answer: (A)

HIPAA centers on keeping resident information confidential. It requires protected health information to be accessible only to staff who need it to care for the resident or to run the facility. Disclosures are allowed only with the resident’s consent or as permitted by law, and you should share only the minimum information necessary to accomplish the purpose. This protection applies to all formats, not just electronic records, and not every disclosure requires a resident’s signature—many disclosures are allowed for treatment, billing, or health care operations without a signed consent.