Which privacy measure ensures protected health information (PHI)?

• A. Using data encryption software on office workstations
• B. Posting PHI on the lobby bulletin board
• C. Sharing PHI via unsecured email
• D. Leaving PHI in unlocked drawers

Answer: (A)

Protecting PHI from unauthorized access is essential. Encryption software on office workstations protects PHI by turning data into unreadable code unless a valid decryption key is used, safeguarding information both at rest on devices and in transit across networks. If a device is lost or stolen or data is intercepted, encrypted information remains unreadable to anyone without the key, reducing the risk of exposure. In contrast, posting PHI publicly, sending it over unsecured email, or leaving PHI in unlocked drawers would allow unauthorized individuals to view the information, which is why encryption on workstations is the best protective measure.