CBCS Regulatory Compliance and HIPAA 2

Question 1

What are the four HIPAA Administrative Simplification standards?

Accepted Answer

Transactions and Code Sets, Privacy, Security, and National Identifier standards

Answer

HIPAA's Administrative Simplification provisions include: (1) Transactions and Code Sets, (2) Privacy Rule, (3) Security Rule, and (4) National Identifier standards (NPI, employer identifier).

Question 2

What constitutes Protected Health Information (PHI) under HIPAA?

Accepted Answer

Individually identifiable health information in any form (electronic, paper, oral) held or transmitted by a covered entity or business associate

Answer

PHI is any individually identifiable health information in any format (electronic, paper, verbal) that relates to a person's past, present, or future physical or mental health condition, provision of healthcare, or payment for healthcare.

Question 3

What is a Business Associate Agreement (BAA) under HIPAA?

Accepted Answer

A written contract between a covered entity and a business associate that specifies permitted uses of PHI and requires the business associate to protect PHI

Answer

A BAA is a legally required contract between a covered entity and any business associate who may access, use, or disclose PHI in the course of performing services. It specifies permitted uses and requires appropriate safeguards.

Question 4

What is the HIPAA Security Rule's requirement for electronic PHI (ePHI)?

Accepted Answer

Covered entities must implement administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and availability of ePHI

Answer

The Security Rule requires covered entities and business associates to implement three types of safeguards — administrative, physical, and technical — to protect ePHI from unauthorized access, use, or disclosure.

Question 5

What are patients' rights under the HIPAA Privacy Rule?

Accepted Answer

Rights including access to their PHI, request for amendments, accounting of disclosures, right to restrict certain uses/disclosures, and right to receive confidential communications

Answer

The HIPAA Privacy Rule gives patients specific rights: access their health records, request corrections (amendments), obtain an accounting of certain disclosures, request restrictions on use/disclosure, and receive confidential communications.

(CBCS) Certified Billing and Coding Specialist Practice Test

(CBCS) Certified Billing and Coding Specialist Practice Test

CBCS Regulatory Compliance and HIPAA 2