AHIMA HIPAA Privacy and Security 2

Question 1

Under HIPAA, which of the following is the minimum necessary standard designed to protect?

Accepted Answer

PHI disclosed to only the minimum amount needed to accomplish the purpose

Answer

The minimum necessary standard requires covered entities to limit PHI disclosures to only what is reasonably necessary to accomplish the intended purpose.

Question 2

A Business Associate Agreement (BAA) is required when a vendor:

Accepted Answer

Creates, receives, maintains, or transmits PHI on behalf of a covered entity

Answer

A BAA is legally required whenever a vendor performs functions or activities on behalf of a covered entity that involve PHI.

Question 3

Which HIPAA rule specifically governs the administrative, physical, and technical safeguards for ePHI?

Accepted Answer

Security Rule

Answer

The HIPAA Security Rule establishes national standards for protecting electronic protected health information through administrative, physical, and technical safeguards.

Question 4

Which of the following represents a permissible disclosure of PHI without patient authorization under HIPAA?

Accepted Answer

Reporting communicable disease information to a public health authority

Answer

HIPAA permits disclosure of PHI to public health authorities for disease surveillance and reporting without patient authorization.

Question 5

When a patient requests an amendment to their health record and the covered entity denies it, the entity must:

Accepted Answer

Allow the patient to submit a statement of disagreement

Answer

If a covered entity denies an amendment request, the patient has the right to submit a statement of disagreement that must be appended to their record.

(AHIMA) American Health Information Management Association Practice Test

(AHIMA) American Health Information Management Association Practice Test

AHIMA HIPAA Privacy and Security 2