SPHR Human Resources

Answer - B - The HIPAA privacy rule requires creation of a code of ethics that applies to the company’s key officers.

Key Takeaway: At a minimum, this code must apply to the company’s principal executive officer, principal financial officer, principal accounting officer or controller, or persons performing similar functions. It does not, however, have to apply more broadly within the organization. All covered entities are required by the HIPAA privacy rule to designate a privacy officer, establish a compliant handling and resolution process, and sign agreements stating business associates will respect confidentiality of patient information.