Under HIPAA's minimum necessary standard, when a GME program accesses patient data for educational quality improvement, the program should:
-
A
Access complete patient charts for all residents to evaluate clinical exposure
-
B
Limit data access to only the information needed for the specific educational purpose
-
C
Share de-identified data freely without restriction
-
D
Require residents to sign HIPAA waivers before clinical rotations