Which laws govern patient privacy and health information in TBCE-related matters?

• A. Only federal HIPAA regulations apply, with no state variation.
• B. State privacy laws and HIPAA interplay; maintain confidentiality and proper disclosures.
• C. Confidentiality is optional in board inquiries.
• D. Privacy laws do not apply to TBCE matters.

Answer: (B)

Patient privacy in TBCE matters is governed by both federal and state law, and the guiding practice is to protect confidentiality while making only the disclosures that the law permits. HIPAA provides the baseline protections for health information (PHI) and sets rules for how that information can be used or disclosed, including in disciplinary or board-related investigations when the disclosure is authorized by law or required for enforcement. State privacy laws can add further protections or specify how disclosures must be handled during board inquiries, so the TBCE must operate under the interplay of both, ensuring that any sharing of information is narrowly tailored to what is permitted. In this context, confidentiality is maintained and disclosures are limited to what HIPAA and state law allow, often with safeguards and, when appropriate, redaction or limited access.

The other options miss this integrated approach: HIPAA alone isn’t the whole picture because state privacy rules also apply; confidentiality isn’t optional in board inquiries, as patient information must be protected; and privacy laws do apply to TBCE matters, not something outside their reach.