Final answer:
The correct statement regarding privacy of health information is that privacy protection is established by federal and state laws, though the US Constitution does not explicitly mention it.
Step-by-step explanation:
The statement that is true regarding the privacy of health information is c) Privacy protection has been established by federal and state laws. While the US Constitution does not explicitly grant a right to privacy, the Supreme Court has recognized it as a fundamental right, inferred from various amendments including the First, Third, Fourth, Fifth, Ninth, and Fourteenth. These inferred rights highlight a commitment to personal autonomy and protection from government intrusion, particularly in personal and home life. This interpretation is supported by the establishment of federal laws like the Health Insurance Portability and Accountability Act (HIPAA), which provides robust privacy protections for health information.