Which of the Following Statements Is True

Multiple Choice

Which of the following statements is true?

A) A covered entity must protect PHI of a deceased patient for six years.
B) A covered entity may not disclosure PHI to a business associate.
C) HIPAA mandates a time limit of 60 days for covered entities to respond to amendment requests.
D) Patients are not allowed access to their medical records until 60 days after discharge.