Question 7 3 pts A basic principle of privacy laws - minimum necessary - is a philosophy common in the regulatory language of HIPAA. The practical application of "minimum necessary," in the storage and access of personal information, suggests which of the following? O store information in a format few people can understand O store only information needed to perform intended business O store information only as long as actively in use O store information in as few locations as possible Question 8 3 pts If a provider is a "covered entity" under HIPAA, protected health information (PHI) must be protected against unauthorized disclosure when the information is in which of the following formats? Spoken (Verbal, Oral, Recorded) Written (Hand-written, Typed, Printed) Electronic (Digital, Scanned, Images) All above must be protected