Which statement best describes the difference between privacy and security in health information management?

Which statement best describes the difference between privacy and security in health information management?

• A. Privacy is the same as confidentiality.
• B. Privacy protects patient rights and controls access; security protects information from unauthorized access and breaches.
• C. Privacy is about encryption; security is about consent.
• D. Privacy concerns only paper records.

Answer: (B)

Privacy focuses on the patient’s rights and who may access or use their health information, including consent and limits on disclosure. Security is the set of safeguards that protect that data from being accessed, altered, or disclosed without authorization, such as access controls, encryption, auditing, and policies. The best statement captures this distinction by saying privacy protects patient rights and controls access, while security protects information from unauthorized access and breaches. For example, privacy governs what can be shared and with whom, while security ensures only authorized people can view or alter the data. Other options mix up concepts—privacy isn’t simply encryption, security isn’t about consent, confidentiality isn’t the same as privacy, and privacy applies to all records, not just paper.

Privacy focuses on the patient’s rights and who may access or use their health information, including consent and limits on disclosure. Security is the set of safeguards that protect that data from being accessed, altered, or disclosed without authorization, such as access controls, encryption, auditing, and policies. The best statement captures this distinction by saying privacy protects patient rights and controls access, while security protects information from unauthorized access and breaches. For example, privacy governs what can be shared and with whom, while security ensures only authorized people can view or alter the data. Other options mix up concepts—privacy isn’t simply encryption, security isn’t about consent, confidentiality isn’t the same as privacy, and privacy applies to all records, not just paper.