AHIMA HIPAA Privacy and Security

Question 1

What is HIPAA?

Accepted Answer

The Health Insurance Portability and Accountability Act — federal law protecting patient health information privacy

Answer

HIPAA establishes national standards for protecting sensitive patient health information from being disclosed without consent.

Question 2

What is Protected Health Information (PHI)?

Accepted Answer

Any individually identifiable health information including demographics, diagnoses, and treatment records

Answer

PHI includes any information that can identify an individual and relates to their health condition, care, or payment, in any form (paper, electronic, oral).

Question 3

What is the minimum necessary standard?

Accepted Answer

Access to PHI should be limited to the minimum amount needed to accomplish the intended purpose

Answer

The minimum necessary principle requires that access to and disclosure of PHI be limited to what is reasonably necessary for the specific purpose.

Question 4

What are the penalties for HIPAA violations?

Accepted Answer

Civil fines from $100 to $50,000 per violation, criminal penalties up to $250,000 and imprisonment

Answer

HIPAA penalties range from civil monetary penalties to criminal prosecution with imprisonment, depending on the nature and severity of the violation.

Question 5

What is a Business Associate Agreement (BAA)?

Accepted Answer

A contract between a covered entity and a vendor that ensures PHI protection when shared

Answer

BAAs legally require business associates (vendors handling PHI) to implement appropriate safeguards and comply with HIPAA regulations.

(AHIMA) American Health Information Management Association Practice Test

(AHIMA) American Health Information Management Association Practice Test

AHIMA HIPAA Privacy and Security