Under HIPAA's Minimum Necessary Standard, a cardiac nurse accessing a patient's full medical history to schedule a stress test is:
-
A
Compliant, as all records may be needed
-
B
Non-compliant, only information necessary for scheduling should be accessed
-
C
Compliant if the patient provided verbal consent
-
D
Non-compliant only if the records are printed