Answer:
D) All of the above
Explanation:
The Health Insurance Portability and Accountability (HIPAA) privacy rules were designed to protect a person's medical records and other relevant medical information. Entities covered under HIPAA are: health plans, health care clearinghouses, and health care providers who electronically transmit any health information.
Incidental disclosures are not considered a HIPAA violation. A disclosure is incidental if the organization applied reasonable safeguards and implemented the minimum necessary standard.