Which of the following is NOT listed as a type of Technical safeguard?

• A. Access control
• B. Integrity
• C. Privacy controls
• D. Transmission security

Answer: (C)

Technical safeguards protect electronic health information by using concrete, technology-based measures. Under the HIPAA Security Rule, they include access control (restricting who can reach data), integrity (ensuring data isn’t altered or destroyed improperly), and transmission security (protecting data as it moves across networks), along with authentication and audit controls. Privacy controls, however, focus on protecting patient privacy through policies and procedures—like minimum-necessary disclosures, patient rights, and privacy notices—rather than on technical mechanisms. So the option describing privacy controls is not a technical safeguard.