Which statement correctly describes an exclusion to PHI?

Prepare for the Board Certified-TeleMental Health Provider Test. Enhance your skills with multiple choice questions and flashcards. Each question includes explanations and hints. Master your exam!

Not all information held by a health care entity is PHI; some records are not covered by HIPAA at all. The statement that correctly describes an exclusion to PHI is that employment records kept by a covered entity in its role as an employer, together with FERPA records, are excluded from PHI. Employment/HR records are managed for the organization as an employer and aren’t considered health information, so they fall outside HIPAA’s privacy protections. FERPA governs education records, so those records are also outside PHI. This means those two types of records aren’t PHI and aren’t subject to HIPAA’s disclosure rules. The other options misstate the scope: employment records are not included in PHI, FERPA records are not the only excluded category, and the exclusion isn’t about non-health information in general but about these specific record types.