The Health Insurance Portability and Accountability Act (HIPAA) protects the privacy of patient health records and restricts unauthorized access to Protected Health Information (PHI).

Why HIPAA applies to this case:

The nurse accessed the patient’s medical records without authorization, violating the HIPAA Privacy Rule.

HIPAA mandates that only authorized healthcare professionals involved in patient care can access medical records.

Unauthorized access is considered a HIPAA violation, which can result in penalties and disciplinary action.

A. Electronic Communications Privacy Act (ECPA) – Protects electronic communications from government surveillance but does not apply to medical records.

C. Gramm-Leach-Bliley Act (GLBA) – Regulates financial data privacy, not medical information.

D. Children's Online Privacy Protection Act (COPPA) – Protects children’s data on websites and apps but does not cover hospital records.

Why Not the Other Options?Thus, the correct answer is B. Health Insurance Portability and Accountability Act (HIPAA) as it enforces strict privacy rules for patient medical records.

Health Insurance Portability and Accountability Act (HIPAA) (1996), 45 CFR Parts 160 and 164.

U.S. Department of Health & Human Services (HHS) HIPAA Guidelines.

Solove, D. J. (2019). Understanding Privacy.

References in Ethics in Technology: