A charge nurse is reviewing information about HIPAA with a group of staff nurses. Which of the following statements by a staff nurse indicates understanding?

"HIPAA allows facility-specific coding of client health care information to ensure privacy."

"Clients who participate in research studies forfeit their HIPAA right to privacy."

"HIPAA allows clients to request a review of their own medical records."

"HIPAA prohibits the uploading of photographs of clients' providers to social media sites."