Which practice helps protect patient information physically and digitally?

• A. Keeping records secure and limiting access to authorized personnel.
• B. Leaving patient files unlocked on a shared drive.
• C. Sharing patient data with all staff without authorization.
• D. Storing patient information on personal devices.

Answer: (A)

Protecting patient information involves controlling access and securing records in both physical and digital forms. Keeping records secure and limiting access to authorized personnel ensures that PHI is seen only by those who need it to do their job, whether the information is stored in locked file cabinets or within protected electronic systems. For physical records, this includes locked storage, restricted handling, and proper disposal; for digital records, it includes strong authentication, role-based access, and encryption where appropriate, along with regular auditing of access. Other options fail because leaving files unlocked on a shared drive, sharing data with all staff, or storing information on personal devices increases the risk of unauthorized access, breaches of confidentiality, and noncompliance with privacy rules.