Which statement about HIPAA's criminal statutes is true?

• A. False statements
• B. Theft or embezzlement
• C. Obstruction
• D. All of the above

Answer: (D)

HIPAA criminal statutes cover three broad areas of misconduct involving health information and government health programs. First, they penalize knowingly making false statements to obtain, access, or disclose individually identifiable health information. Second, they address theft or embezzlement related to health care funds or assets within health care settings. Third, they prohibit obstruction of health care programs or related investigations. Because each of these types of wrongdoing can fall under HIPAA’s criminal provisions (and related health care fraud or program statutes), all of the listed statements are true. Therefore, the best answer is the option that encompasses all of them.