What is the main purpose of assigning unique user identifiers when protecting electronic protected health information (ePHI)?

### Why this is right A unique user identifier connects access to a particular user, which supports individual accountability and traceability. It can help distinguish authorized activity from use that should be investigated. ### The concept **Electronic protected health information (ePHI)** is electronic patient information that requires protection. Identifiers help an organization know which account accessed it. Role-based access controls then limit what a user can access according to job functions. Authentication checks that the person using an account is permitted to use it. These safeguards serve related but different purposes: identification names the account, access control limits permissions, and authentication verifies access. ### The other options - **B. To encrypt every file without using encryption keys**: identifiers do not encrypt data; encryption transforms data and relies on key management. - **C. To replace audit controls and access logs**: identifiers support traceability, but logs and audit controls record and review activity. - **D. To give every employee unrestricted access to patient records**: role-based access limits access to what is needed for job functions. ### Terms - **Electronic protected health information (ePHI)**: protected health information stored or handled electronically. - **Role-based access control**: a method that limits access according to a person's job role. - **Authentication**: checking that a user is who they claim to be. ### Remember Unique identifiers help show who accessed information; they do not replace permissions, authentication, or audit logs.