Under HIPAA, what is the minimum necessary standard as it relates to protected health information (PHI) in the context of CDI?
-
A
All PHI must be encrypted at rest and in transit
-
B
Access to PHI should be limited to the minimum needed to accomplish the intended purpose
-
C
PHI may only be used for treatment, never for payment
-
D
All staff must complete annual HIPAA training