Under HIPAA's security rules,addressable specifications _____.
A) Are mandatory and must be implemented in health care facilities and covered entities
B) Do not bind the entity to implementation but require documentation of alternatives
C) Permit the health care facilities and the covered entities to ignore unreasonable rules
D) Impact only the hybrid medical records that are maintained by covered entities

Question

Quizplus · Accepted Answer

Addressable specifications are not mandatory and do not require implementation, but covered entities must document their reasons for not implementing them and implement an equivalent alternative.

Under HIPAA's Security Rules,addressable Specifications _____