Test Security and Data Management Flashcards

A psychometrist needs to transport a neuropsychological test kit, including stimulus books and manuals, from the main clinic to a satellite office. Which of the following represents the most secure method of transport?

Answer: Placing the materials in a locked briefcase or bag that remains in the psychometrist's possession at all times.

Test materials are confidential and must be secured to maintain their integrity. A locked container that remains in the psychometrist's direct possession prevents loss, theft, and unauthorized access. Leaving materials in a car (even in the trunk) poses a risk of theft, an open bag is not secure, and standard mail lacks the necessary security and chain of custody for such sensitive materials.

In the United States, what is the primary purpose of the HIPAA Security Rule as it pertains to patient data management?

Answer: To set national standards for the security of electronic protected health information (e-PHI).

The HIPAA Security Rule specifically establishes national standards for protecting electronic protected health information (e-PHI) by requiring administrative, physical, and technical safeguards. It is distinct from the Privacy Rule, which covers PHI in all formats, and it does not mandate specific software or govern malpractice penalties.

Which of the following is the most ethically and legally sound method for disposing of outdated psychological test record forms that contain protected health information (PHI)?

Answer: Cross-cut shredding the forms to ensure the information is unrecoverable.

To comply with HIPAA and ethical standards, documents containing PHI must be destroyed in a way that makes them unreadable and unreconstructible. Cross-cut shredding is the most common and accepted method for achieving this in an office setting. Redacting, recycling, or simple trashing does not provide sufficient protection. While indefinite storage might be secure, proper disposal of outdated records is a key part of the data lifecycle.

While browsing a professional social media group, a psychometrist finds a post where another user has uploaded a photograph of a stimulus item from a widely used, copyrighted intelligence scale. What is the psychometrist's primary ethical obligation?

Answer: Report the post to the group administrator and notify the test publisher of the security breach.

The primary ethical duty is to protect the integrity and security of psychological tests. Publicly posting copyrighted material compromises the test's validity for future examinees. The correct action is to take steps to have the material removed (reporting to the administrator) and to inform the owner of the intellectual property (the test publisher) so they can take further action.

A supervising psychologist asks a psychometrist to prepare a patient dataset for a research study. To protect patient privacy according to the HIPAA Safe Harbor method, what is the most critical step?

Answer: De-identifying the data by removing all 18 specified personal identifiers.

The HIPAA Safe Harbor method requires the removal of all 18 specified personal identifiers (e.g., name, specific dates, geographic subdivisions smaller than a state, etc.) to consider data de-identified. While password protection is a necessary security measure, it does not de-identify the data itself. Keeping a linking key means the data is coded, not fully anonymized under this method.

A psychometrist receives a subpoena from an attorney requesting the complete test protocol for a former patient, including raw data and specific responses. The psychometrist is unable to contact the patient to obtain a release of information. What is the most appropriate initial action?

Answer: Consult with the supervising psychologist and the organization's legal counsel before taking any action.

A subpoena is a legal demand, but releasing protected health information and copyrighted test materials requires careful handling. The proper procedure is not to act unilaterally but to involve the supervising psychologist and legal counsel to determine the correct legal and ethical response, which may involve seeking a protective court order or asserting privilege before releasing any information.