Which records must be safeguarded against unauthorized access?

• A. Only paper records.
• B. Records can be accessed by anyone within the clinic.
• C. All patient records, including electronic health data, with access controls, audit logs, encryption, and secure storage appropriate to the setting.
• D. Only some records require encryption.

Answer: (C)

Safeguarding patient information applies to every record, in every format, because confidentiality rests on protecting all data a patient entrusts to the practice. In today’s podiatry setting, that means both paper records and electronic health data must be shielded with appropriate measures. Implement layered safeguards: use access controls so only authorized staff can open records; maintain audit logs to track who looked at what and when; apply encryption to protect data at rest and in transit; and store records securely with physical protections for paper and robust security for electronic systems (including servers, backups, and disaster recovery) that fit the practice’s setting. These comprehensive protections align with HIPAA requirements and state rules, ensuring that all patient records receive proper protection rather than only certain types or formats.