AHIMA AHIMA Release of Information 2

Question 1

Which state law generally takes precedence when it provides greater privacy protections than HIPAA?

Accepted Answer

State law prevails when it is more stringent (more protective of patient privacy) than HIPAA

Answer

HIPAA always supersedes state law

Answer

Federal law always preempts state law for health records

Answer

State law applies only to Medicaid patients

Question 2

What additional federal protections apply to substance use disorder treatment records beyond standard HIPAA requirements?

Accepted Answer

42 CFR Part 2 (Confidentiality of Substance Use Disorder Patient Records)

Answer

Joint Commission accreditation standards

Answer

The Mental Health Parity Act

Answer

CMS Conditions of Participation

Question 3

Under HIPAA, what is a 'business associate'?

Accepted Answer

A person or entity that performs functions or activities on behalf of a covered entity involving PHI

Answer

Any vendor that sells products to a hospital

Answer

An employee of the covered entity

Answer

A health plan member

Question 4

What is the correct process when a patient revokes a previously signed HIPAA authorization?

Accepted Answer

Disclosures that already occurred in reliance on the authorization are not affected, but future disclosures must stop

Answer

The covered entity must immediately stop all disclosures, with no exceptions

Answer

The revocation must be notarized to be valid

Answer

Revocation applies only to electronic records

Question 5

Which of the following is an example of a permitted disclosure of PHI without patient authorization under HIPAA's public interest exceptions?

Accepted Answer

Reporting communicable diseases to a state or local public health authority

Answer

Sharing records with a patient's adult child without consent

Answer

Disclosing records for employment background checks

Answer

Providing records to a marketing research firm

Question 6

What must a covered entity include in its Notice of Privacy Practices (NPP)?

Accepted Answer

A description of how PHI may be used and disclosed, patient rights, and how to file a complaint with HHS

Answer

A list of all patients' names and diagnoses

Answer

The facility's billing codes and fee schedule

Answer

Employee access log policies only