A. This is correct because EHR systems use security measures such as passwords, encryption, and access controls to protect patient information. It provides an accurate and reassuring explanation of privacy safeguards. B. This is incorrect because not all staff have unrestricted access; access is limited based on role and need-to-know. C. This is incorrect because EHR data is not automatically deleted after discharge; it is maintained according to legal and institutional policies. D. This is incorrect because while access is limited, other authorized providers involved in care may also view the chart; stating only the primary provider can see it is inaccurate.