AHIMA HIPAA Privacy and Security 3

Question 1

Under the HIPAA Breach Notification Rule, a covered entity must notify affected individuals of a breach within:

Accepted Answer

60 days of discovery

Answer

Covered entities must provide breach notifications to affected individuals without unreasonable delay and no later than 60 days following discovery of the breach.

Question 2

A 'small breach' affecting fewer than 500 individuals in a state must be reported to HHS:

Accepted Answer

Annually, no later than 60 days after the end of the calendar year

Answer

Breaches affecting fewer than 500 individuals must be logged and reported to HHS annually, within 60 days of the end of the calendar year.

Question 3

Which of the following is a required implementation specification under the HIPAA Security Rule's Administrative Safeguards?

Accepted Answer

Security management process

Answer

The security management process is a required administrative safeguard that includes risk analysis, risk management, sanction policy, and information system activity review.

Question 4

Which of the following best describes 'workforce' under HIPAA?

Accepted Answer

Employees, volunteers, trainees, and others under the direct control of the covered entity

Answer

HIPAA defines workforce broadly to include all persons whose conduct is under the direct control of the covered entity, whether or not they are paid.

Question 5

Which right does HIPAA give patients regarding their health records?

Accepted Answer

The right to access and obtain a copy of their PHI

Answer

HIPAA's Privacy Rule grants individuals the right to access, inspect, and receive copies of their PHI held by a covered entity.

(AHIMA) American Health Information Management Association Practice Test

(AHIMA) American Health Information Management Association Practice Test

AHIMA HIPAA Privacy and Security 3