'

What is the purpose of a Privacy Impact Assessment (PIA)?

A. Determine whether paper-based records are stored securely
B. Determine whether information must be disclosed according to the Freedom of Information Act (FOIA)
C. Determine whether the collection and maintenance of PII is worth the risk to individuals
D. Determine whether Protected Health Information (PHI) is held by a covered entity