A nurse educator is teaching a group of newly licensed nurses about maintaining client confidentiality according to HIPAA regulations. Which of the following statements by a newly licensed nurse indicates an understanding of the teaching?

"HIPAA rules vary from state to state."

"A client's diagnosis can be posted on the communication board inside the clients room."

"We should share our computer passwords with our manager."

"HIPAA rules allow clients to receive a copy of their medical records."