Under HIPAA, which option describes a correct patient right to limit how information is used or disclosed?

• A. See and copy their health record
• B. Update their health record
• C. Request restriction on certain uses or disclosures
• D. Choose how to receive health information

Answer: (C)

Under HIPAA, patients can request restrictions on how their PHI is used or disclosed. This right lets individuals tell a covered entity not to use or disclose their information in certain ways or to specific people or places. The entity can choose to agree to the restriction in many cases, though it isn’t required to in every situation. This is distinct from the right to see or copy records (access), the right to amend or update information, and the right to request confidential communications or alternative ways of receiving PHI.