Which of the following is NOT true about HIPAA?

Correct answer: A. Patients must be notified of any breach via social media

• A. FALSE — HIPAA does NOT require social media notification of breaches. Breach notification must be provided by written notice (mail or email to affected individuals) and to the HHS Secretary. Social media is not an approved or required notification channel.
• B. TRUE — Dental offices are covered entities under HIPAA and must comply.
• C. TRUE — Covered entities must conduct risk assessments, designate privacy officers, and conduct audits.
• D. TRUE — HIPAA requires regular, documented staff training on privacy and security rules.