What does the HITECH Act do?

• A. A law meant to expand the role of health information technology while ensuring that health information remains secure. This doesn't supersede HIPAA.
• B. It replaces HIPAA.
• C. It governs PCI-DSS.
• D. It applies only to education records.

Answer: (A)

The test is about how the HITECH Act relates to health information and HIPAA. The Act is designed to expand the use of health information technology, especially electronic health records, while strengthening the privacy and security protections around health information. It does not replace HIPAA; instead, it reinforces it by increasing penalties for violations, expanding protections to business associates, and adding breach notification requirements. It also supports incentives and programs to promote meaningful use of health IT. The other options miss the point: PCI-DSS governs payment card data, not health information, and FERPA covers education records, not health data.