Which statement best describes privacy considerations in CDI metrics reporting?

Which statement best describes privacy considerations in CDI metrics reporting?

• A. De-identified data must be used for all CDI reporting.
• B. CDI data may contain PHI; enforce de-identification, access controls, secure data handling, and compliance with privacy regulations.
• C. Privacy considerations are optional in CDI reporting.
• D. Only aggregated billing data is required for privacy.

Answer: (B)