51. A hospital provided Health Insurance Portability and Accountability Act (HIPAA) compliance training to its staff and briefly discussed mobile devices and storage media use they have provided for staff use The privacy officer notices that one piece of information about protected health information (PHI) on devices was inaccurate

Which piece of information was incorrect?

O Hospital-owned mobile devices are exempt from encryption requirements.

O Lost hospital-owned mobile devices with passwords must be reported immediately.

O Mobile devices must be password protected.

O Personal mobile devices used for work-related reasons must be encrypted.