AHIMA AHIMA Release of Information

Question 1

What federal law primarily governs the release of protected health information (PHI) by covered entities in the US?

Accepted Answer

The Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule

Answer

The Freedom of Information Act (FOIA)

Answer

The Health Information Technology for Economic and Clinical Health (HITECH) Act only

Answer

The Americans with Disabilities Act (ADA)

Question 2

What elements are required in a valid HIPAA authorization for release of PHI?

Accepted Answer

Description of information, purpose, recipient, expiration, patient signature with date, and right to revoke

Answer

Patient name and date only

Answer

Physician signature and facility stamp

Answer

Insurance ID number and diagnosis code

Question 3

Under HIPAA, what is the 'minimum necessary' standard for release of information?

Accepted Answer

Limiting PHI disclosures to the least amount necessary to accomplish the intended purpose

Answer

Releasing only the first and last page of the record

Answer

Releasing only data from the past 12 months

Answer

Providing only the discharge summary for all requests

Question 4

What is the timeframe a covered entity has to provide a patient access to their own PHI under the HIPAA Access Rule?

Accepted Answer

30 calendar days, with one 30-day extension if needed

Answer

7 business days

Answer

60 calendar days

Answer

14 calendar days

Question 5

Which type of PHI disclosure does NOT require a patient's authorization under HIPAA?

Accepted Answer

Release for treatment, payment, or healthcare operations (TPO)

Answer

Release to a marketing firm

Answer

Release to the patient's employer for personnel decisions

Answer

Release to a life insurance company

Question 6

What is a 'breach' under HIPAA's Breach Notification Rule?

Accepted Answer

An impermissible use or disclosure of unsecured PHI that compromises its security or privacy

Answer

Any access to an electronic health record by unauthorized staff

Answer

Sending a fax to the wrong number regardless of content

Answer

Any complaint filed with the covered entity