AHIC Privacy and Security 3

Question 1

Which HIPAA rule specifically requires covered entities to implement administrative, physical, and technical safeguards for ePHI?

Accepted Answer

HIPAA Security Rule

Answer

The HIPAA Security Rule mandates safeguards specifically for electronically protected health information (ePHI).

Question 2

In a health information exchange (HIE), the 'opt-in' consent model means:

Accepted Answer

Patients must affirmatively agree before their data is shared through the HIE

Answer

An opt-in model requires explicit patient consent before their health information is shared, giving patients more control over their data.

Question 3

A nurse accesses the medical records of a celebrity patient out of curiosity, with no clinical justification. This is an example of:

Accepted Answer

Insider threat and privacy violation

Answer

Accessing PHI without a legitimate need constitutes an insider threat and a HIPAA privacy violation, regardless of the employee's good intentions.

Question 4

Which encryption standard is commonly recommended for protecting ePHI in transit in U.S. healthcare?

Accepted Answer

TLS (Transport Layer Security)

Answer

TLS is the standard protocol for encrypting data in transit, protecting ePHI from interception during transmission.

Question 5

A patient requests an amendment to their medical record because they believe it contains an error. Under HIPAA, the covered entity may deny the request if:

Accepted Answer

The information was not created by the covered entity

Answer

A covered entity may deny an amendment request if the information was not created by that entity, as it may lack the context to assess accuracy.

(AHIC) AMIA Health Informatics Certification Practice Test

(AHIC) AMIA Health Informatics Certification Practice Test

AHIC Privacy and Security 3