HIPAA and Scope of Practice Flashcards
7 cards from real AAMA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 HIPAA and Scope of Practice flashcards as text
A patient calls asking for their spouse's lab results. The spouse is not present. What should the medical assistant do?
Answer: Release results only if the patient has signed a HIPAA authorization naming the spouse
PHI can only be shared with a third party if the patient has provided written authorization specifically naming that individual.
Which of the following is an example of a HIPAA-compliant way to dispose of PHI?
Answer: Shredding documents before disposal
HIPAA requires that PHI be rendered unreadable before disposal; shredding is the standard method for paper documents.
A medical assistant overhears a coworker discussing a patient's diagnosis in the hallway where others can hear. This is a violation of which HIPAA rule?
Answer: Privacy Rule
The HIPAA Privacy Rule protects PHI from unauthorized verbal disclosures in public or semi-public settings.
Under the HIPAA Minimum Necessary Standard, when a medical assistant pulls a patient chart, they should access:
Answer: Only the information needed to perform their specific task
The Minimum Necessary Standard requires accessing only the PHI needed to accomplish the intended purpose.
A Business Associate Agreement (BAA) is required when a covered entity shares PHI with:
Answer: A vendor who handles PHI on behalf of the practice
A BAA is a HIPAA-required contract between a covered entity and a business associate who creates, receives, or transmits PHI.
Which entity enforces HIPAA Privacy and Security Rules?
Answer: Office for Civil Rights (OCR)
The HHS Office for Civil Rights is the federal agency responsible for enforcing HIPAA Privacy and Security Rules.
A patient requests an amendment to their medical record. Under HIPAA, the covered entity must respond within how many days?
Answer: 60 days
HIPAA requires covered entities to act on a request for amendment within 60 days, with one possible 30-day extension.