A clinic is implementing a system that will allow patients to access their data via the web. The health clinic staff will be able to review questionnaires and run various reports. Which of the following requirements must be taken into consideration during the system implementation phase?
A. SOX
B. HHS
C. FERPA
D. HIPAA