AAPC HIPAA & Healthcare Compliance Regulations 2

Question 1

What is the 'minimum necessary' standard under HIPAA?

Accepted Answer

The principle that only the minimum amount of PHI necessary to accomplish the purpose should be used or disclosed

Answer

The minimum necessary standard requires that covered entities limit PHI use and disclosure to only what is reasonably necessary for the intended purpose.

Question 2

Under HIPAA, when is a patient authorization required to disclose PHI?

Accepted Answer

For disclosures to third parties for purposes other than treatment, payment, or healthcare operations

Answer

A written patient authorization is required for disclosures beyond treatment, payment, healthcare operations, and other permitted purposes outlined in the Privacy Rule.

Question 3

Which federal agency is primarily responsible for enforcing HIPAA?

Accepted Answer

Office for Civil Rights (OCR) within HHS

Answer

The HHS Office for Civil Rights (OCR) enforces the HIPAA Privacy, Security, and Breach Notification Rules.

Question 4

What is a Notice of Privacy Practices (NPP) under HIPAA?

Accepted Answer

A document that informs patients how their health information may be used and their privacy rights

Answer

Covered entities must provide patients with an NPP describing how PHI is used, patient rights, and the entity's legal duties regarding PHI.

Question 5

What is the maximum civil penalty per violation category under HIPAA for 'willful neglect — not corrected'?

Accepted Answer

$50,000 per violation with a $1.9 million annual cap

Answer

The highest HIPAA penalty tier for willful neglect that is not corrected is $50,000 per violation, with an annual cap of $1.9 million for identical violations.

(AAPC) American Academy of Professional Coders Biller Certified Practice Test

(AAPC) American Academy of Professional Coders Biller Certified Practice Test

AAPC HIPAA & Healthcare Compliance Regulations 2