Which of the following qualifies as an exception to the HIPAA Privacy Rule?

• A. Psychotherapy notes
• B. PHI of a public health report
• C. Employment records
• D. Medical device data

Answer: (A)

Psychotherapy notes have special protection under HIPAA that makes them an exception to the usual handling of PHI. These notes, created by a mental health professional during a private therapy session, are kept separately from the patient’s other medical records and are not treated the same as standard PHI. Because of this separate status, they require more stringent safeguards and typically can be disclosed only with the patient’s explicit authorization, with limited allowed disclosures. That heightened protection is what makes psychotherapy notes the correct example of an exception to the HIPAA Privacy Rule.

Other items like public health PHI, employment records, or medical device data are still subject to the general Privacy Rule rules and standard disclosures, though they may be limited or governed by specific laws or circumstances.