Password-protected digital storage is used to restrict access to electronic client files and ensure confidentiality and compliance with which standard?

• A. FERPA
• B. GDPR
• C. PCI-DSS
• D. HIPAA

Answer: (D)

Safeguarding electronic client files hinges on a standard that specifically governs the privacy and security of health information. HIPAA provides these rules, including the technical safeguards that require access controls and authentication—like password-protected storage—to ensure only authorized individuals can view electronic PHI. This alignment helps maintain confidentiality and supports compliance with HIPAA’s privacy and security requirements.

FERPA covers student education records, not health information. GDPR governs data protection in the European Union, not a U.S. healthcare privacy framework. PCI-DSS focuses on payment card data security. So password-protected digital storage best fits HIPAA as the standard governing confidentiality of health information.