Which statement about securing and backing up records is accurate?

• A. Inform clients about mechanisms used to secure and back up records, and document all contacts.
• B. Do not inform clients about security measures to protect trade secrets.
• C. Backup is optional and often unnecessary.
• D. Security measures only apply to paper records.

Answer: (A)

Transparency about how records are protected and backed up is essential for trust and compliance. Patients have a right to know how their health information is safeguarded, including the security measures in place and how backups are handled for continuity of care. Documenting all contacts with the patient about these protections ensures there is a clear, auditable record that the patient was informed and understood how their data is protected. This complements overall responsibilities under privacy and security rules, including how electronic information is encrypted, access-controlled, and backed up to prevent loss.

Informing patients about security measures is appropriate and expected; withholding such information to protect trade secrets undermines trust and the patient’s right to understand how their data is handled. Backups are not optional in modern practice—they are a fundamental part of data integrity and disaster recovery. Security measures are not limited to paper records; electronic records require robust safeguards too, and paper records still need appropriate physical security.