AHIMA HIPAA Privacy and Security

Question 1

What is HIPAA?

Accepted Answer

The Health Insurance Portability and Accountability Act — federal law protecting patient health information privacy

Answer

A type of health insurance

Answer

A medical procedure

Answer

A coding system

Question 2

What is Protected Health Information (PHI)?

Accepted Answer

Any individually identifiable health information including demographics, diagnoses, and treatment records

Answer

Only a patient's name

Answer

Only insurance information

Answer

Only billing records

Question 3

What is the minimum necessary standard?

Accepted Answer

Access to PHI should be limited to the minimum amount needed to accomplish the intended purpose

Answer

All staff can access all records

Answer

PHI should be shared freely

Answer

The standard only applies to billing

Question 4

What are the penalties for HIPAA violations?

Accepted Answer

Civil fines from $100 to $50,000 per violation, criminal penalties up to $250,000 and imprisonment

Answer

A verbal warning only

Answer

No penalties exist

Answer

Only a small fine

Question 5

What is a Business Associate Agreement (BAA)?

Accepted Answer

A contract between a covered entity and a vendor that ensures PHI protection when shared

Answer

A partnership between hospitals

Answer

An insurance agreement

Answer

A patient consent form

Question 6

What is a HIPAA breach notification?

Accepted Answer

Required notification to affected individuals and HHS when unsecured PHI is improperly accessed or disclosed

Answer

An optional courtesy notification

Answer

A system error report

Answer

A patient complaint form