Certified Healthcare Technology Specialist (CHTS) Process Workflow & Information Management Redesign Practice Exam

Which example illustrates how HITECH has expanded federal privacy laws under HIPAA?

1. Prohibition of sales of a patient's health information without authorization

2. Increased penalties for data theft

3. Streamlined processes for data subject access requests

4. Unified laws for patient health data across states

The correct answer is: Prohibition of sales of a patient's health information without authorization

The expansion of federal privacy laws under HIPAA through HITECH is exemplified by the prohibition of the sale of a patient's health information without authorization. HITECH, or the Health Information Technology for Economic and Clinical Health Act, specifically introduced stronger privacy protections and enhanced the requirements for how personal health information (PHI) can be shared. Prior to HITECH, HIPAA allowed for certain disclosures of health information without patient consent, but HITECH strengthened these protections by explicitly requiring that any sale of health information must have patient authorization. This provision aims to maintain the integrity of patient data and ensures that individuals have control over how their health information is used and shared, particularly in commercial contexts. This focus on patient consent and the restriction on the sale of health data underscores a significant enhancement in privacy protection brought about by HITECH. The other options, while related to healthcare data management, do not specifically illustrate the direct impact HITECH has had on expanding federal privacy laws in the same manner as the requirement for patient authorization in the sale of health information.