Final answer:
A state law is more stringent than HIPAA if it provides greater privacy protections to the patient, gives the patient fewer rights and more latitude to healthcare entities to use and disclose PHI, or requires more authorizations for uses and disclosures than HIPAA. Options a, c and d are correct.
Step-by-step explanation:
A state law is more stringent than HIPAA if it:
- Provides greater privacy protections to the patient than HIPAA provides. For example, a state law may require additional safeguards or restricted access to patient information.
- Gives the patient fewer rights and a CE more latitude to use and disclose PHI. This means that the state law may allow healthcare entities to share patient information without explicit patient consent.
- Requires an authorization for more uses and disclosures than HIPAA. In other words, the state law may have stricter requirements for obtaining patient authorization for the release of their information.