PHI is regulated under which regulatory bodies?

• A. FEMA and EPA
• B. FDA and NIH
• C. HIPAA and CMS
• D. OSHA and FDA

Answer: (C)

PHI stands for Protected Health Information, and its handling is governed by HIPAA—the Health Insurance Portability and Accountability Act. HIPAA sets the privacy and security standards that protect PHI and applies to covered entities and their business associates. CMS, the Centers for Medicare & Medicaid Services, administers Medicare and Medicaid and enforces HIPAA rules within those programs, helping ensure PHI is protected in federal health-care contexts. The other options focus on areas such as disaster response, environmental protection, medical products and research, or workplace safety, which aren’t the primary regulators of PHI.