A charge nurse is reviewing information about HIPAA with a group of staff nurses. Which of the following statements demonstrate understanding of the procedure?

"HIPAA allows clients to request a review of their own medical records."

"Clients who participate in research studies forfeit their HIPAA right to privacy."

"HIPAA prohibits the uploading of photographs of client's providers to social media sites."

"HIPAA allows facility-specific coding of client health care information to ensure privacy."