HIPAA requires that policies and procedures be maintained for a minimum of _____________
a. 7 years
b. 6 years from data of creation
c. 6 years from data of creation or date when last in effect whichever is later
d. 7 years from last in effect
Answer: c