Which statement lists the core HIPAA privacy and security principles that affect health information handling?

• A. Privacy and security of PHI, patient rights, minimum necessary disclosure, access controls, auditing, and breach notification
• B. Privacy and security are not important for PHI
• C. Only privacy matters, not security
• D. Access controls and breach notification are optional

Answer: (D)