Under the HIPAA Privacy Rule, covered entities must retain documentation of their privacy policies and procedures for how long?
-
A
3 years from creation or last effective date
-
B
6 years from creation or last effective date
-
C
10 years from creation or last effective date
-
D
Indefinitely