Under the Health Insurance Portability and Accountability Act (HIPAA) ,a patient must: (Select all that apply. )

A) provide his true name before he can be treated.
B) be informed of his privacy rights.
C) have his personal health information used for treatment or payment only.
D) have his personal health information used on a need-to-know basis only.

HIPAA is a federal law designed to protect the privacy of patient health information,referred to as PHI,or protected health information.Three key concepts of HIPAA are (1)institutions are required to inform patients of the privacy rights they have and how the institution will handle their PHI; (2)the institution and health care providers are to use or disclose the patient's PHI only for the purpose of treatment or payment or for health care operations;and (3)health care providers disclose only the minimum amount of PHI necessary on a need-to-know basis to accomplish the purpose of the use.