CACs Privacy and Security Standards 2

Question 1

A consumer asks their CAC to email a copy of their completed Marketplace application to a family member. What is the correct response?

Accepted Answer

Decline unless the consumer provides written authorization and the family member is an authorized representative

Answer

CACs must obtain written authorization before sharing application information with anyone other than the consumer, even family members, unless they are an authorized representative.

Question 2

Which federal law primarily governs the privacy protections that CACs must follow when handling consumers' health information?

Accepted Answer

The Health Insurance Portability and Accountability Act (HIPAA)

Answer

HIPAA establishes the baseline privacy and security standards for protected health information (PHI) that CACs must comply with.

Question 3

A CAC discovers that a co-worker has been accessing consumer application files without a business need. What should the CAC do first?

Accepted Answer

Report the incident to their supervisor or privacy officer immediately

Answer

Unauthorized access to consumer data is a potential breach that must be escalated to a supervisor or privacy officer immediately per standard incident response protocols.

Question 4

When a consumer calls a CAC's office and wants to discuss their application over the phone, what should the CAC do first?

Accepted Answer

Verify the caller's identity using established authentication questions before discussing any PII

Answer

CACs must verify caller identity through security questions or other authentication methods before discussing any personally identifiable information over the phone.

Question 5

A CAC prints a consumer's application summary and accidentally leaves it on a shared printer. This is an example of what type of privacy risk?

Accepted Answer

An inadvertent disclosure of PII

Answer

Leaving printed PII unattended in a shared space constitutes an inadvertent disclosure, which is a privacy incident that must be reported and remediated.

(CACs) Certified Application Counselor Practice Test

(CACs) Certified Application Counselor Practice Test

CACs Privacy and Security Standards 2