Exam 400-007 topic 1 question 92 discussion

The correct answer is D. technical integrity and transmission security. In the context of HIPAA compliance, the healthcare provider needs to ensure that protected health information (PHI) is not altered, tampered with, or accessed without authorization. To address the issue of PHI being altered without patient consent, the provider should focus on ensuring the integrity of the data (i.e., ensuring that data is not altered without proper authorization) and transmission security (i.e., ensuring that data is protected during transmission, such as through encryption).

Answer is C, check: https://www.techslang.com/definition/what-is-the-administrative-safeguard/

According to the following link, answer 'C' is for implement procedures to regularly review records of information system activity, access logs and security incident tracking - not prevent it. Answer 'D' is for Implement policies and procedures to protect ePHI from improper alteration or destruction. https://www.cisco.com/en/US/docs/solutions/Enterprise/Compliance/HIPAA/HIP_AppC.html#wp1085353

It looks D to me. - HIPAA's data integrity requirements, protecting ePHI from "improper alteration" while stored or while in transit -"integrity" means that e-PHI is not altered or destroyed in an unauthorized manner. With no transmission security data might be altered in transit, even with proper admin access.

C: because of the alteration without patient consent

https://www.cisco.com/en/US/docs/solutions/Enterprise/Compliance/HIPAA/HIP_AppC.html#wp1085353