Which confidentiality law is applicable?

• A. HIPAA
• B. GDPR
• C. GLBA
• D. FERPA

Answer: (C)

The main idea is that different laws protect different kinds of information, depending on who holds it and in what context. GLBA focuses on the confidentiality and security of nonpublic personal financial information that a financial institution handles. In healthcare settings, this matters when patient data includes financial details—like billing records, insurance information, or payment history—that a financial institution manages. GLBA requires safeguards to protect that financial information and also governs how notices about privacy are given to customers. HIPAA is the primary guard for health information itself (PHI); GDPR covers European data protection; FERPA protects student education records. So, when the scenario involves financial information within the patient-financial relationship, GLBA is the most applicable confidentiality law.