Dr. Bob's computerized records are damaged by a power surge. Which of the following is most true?

A. Dr bob isn't at fault. B. Dr Bob is at fault. C. The records custodian, but not Dr bob will be liable. D. Dr Bob is at fault unless he had proper surge protection devices in place.

I say Dr. Bob is at fault but I am not confident in my answer.

And the other one I am having trouble with is: Dr Bob's computerized records have been compromised by a hacker, resulting in damages to patients. Which of the following is most true?

A. Dr Bob may be liable if he didn't have proper firewall or other protections
B. Dr Bob won't be liable
C. Dr Bob will be liable
D. The risk manager, but not dr bob, will be liable.

I again say Dr bob is liable but am confused because in my book it makes this notation: The health information manager lessens the possibility of legal liability for unauthorized access to or careless handling of patient info. So it makes me think that answer D may be the correct answer.

Can you please help me on these 2 questions.