Which of the following is a physical safeguard used to protect personal health information?

The correct choice highlights the importance of utilizing physical safeguards to protect personal health information. In this context, personal identification card access serves as a robust method for limiting entry to areas where sensitive health data is stored or processed. This form of access control is essential because it ensures that only authorized personnel can reach physical locations housing health records and systems, thereby preventing unauthorized access and potential breaches of privacy.

Physical safeguards are tangible measures that can help secure health information, addressing the physical environment in which data is stored or managed. Personal identification cards enhance security by requiring individuals to present proof of authorization before accessing sensitive areas, effectively reducing the risk of accidental or intentional breaches.

In contrast, the other choices reflect administrative or technical safeguards rather than physical measures. Assigning user access based on role pertains to managing digital permissions within an information system, while establishing policies for auditing system access involves monitoring user activity in the digital realm. Password expiry is another technical safeguard aimed at enhancing cybersecurity but does not involve a physical barrier. Therefore, personal identification card access stands out as a clear physical safeguard among the options presented.