Which statement about HIPAA timelines is correct?

Which statement about HIPAA timelines is correct?

• A. HIPAA privacy rules went into effect in 2010, followed by security rules in 2011
• B. HIPAA privacy rules went into effect in 2003, followed by security rules in 2004
• C. HIPAA privacy rules went into effect in 2002, followed by security rules in 2003
• D. HIPAA privacy rules never implemented

Answer: (C)

Understanding HIPAA timelines means recognizing the order in which protections were put in place. The privacy rule sets out who may access or disclose protected health information and patients’ rights over their records, and it was established before the more technical safeguards required for electronic PHI. In the timeline shown, privacy in 2002 followed by security in 2003 reflects that progression. The other statements place the milestones at dates that are much later or claim there was no implementation, which contradicts how HIPAA was rolled out.

Understanding HIPAA timelines means recognizing the order in which protections were put in place. The privacy rule sets out who may access or disclose protected health information and patients’ rights over their records, and it was established before the more technical safeguards required for electronic PHI. In the timeline shown, privacy in 2002 followed by security in 2003 reflects that progression. The other statements place the milestones at dates that are much later or claim there was no implementation, which contradicts how HIPAA was rolled out.