CCCP Healthcare Compliance & HIPAA 2

Question 1

Under HIPAA's Minimum Necessary Standard, what must a covered entity do when requesting PHI from another covered entity?

Accepted Answer

Limit the request to the minimum PHI reasonably needed for the purpose

Answer

The Minimum Necessary Standard requires covered entities to limit PHI requests to only what is reasonably necessary to accomplish the intended purpose.

Question 2

A hospital's compliance officer discovers that a nurse accessed the medical records of a celebrity patient out of curiosity. Under HIPAA, this is best characterized as:

Accepted Answer

An impermissible use of PHI that may constitute a reportable breach

Answer

Accessing PHI without a permissible purpose—even without external disclosure—is an impermissible use that must be evaluated under the Breach Notification Rule.

Question 3

Which HIPAA rule specifically governs the physical, administrative, and technical safeguards for electronic PHI (ePHI)?

Accepted Answer

The Security Rule

Answer

The HIPAA Security Rule establishes national standards for protecting ePHI through administrative, physical, and technical safeguards.

Question 4

A Business Associate Agreement (BAA) under HIPAA must include which of the following provisions?

Accepted Answer

Obligations of the BA to report breaches of unsecured PHI to the covered entity

Answer

BAAs must require business associates to report any discovered breach of unsecured PHI to the covered entity within applicable timeframes.

Question 5

Under the HIPAA Breach Notification Rule, covered entities must notify HHS of breaches affecting fewer than 500 individuals:

Accepted Answer

Within 60 days of the calendar year end in which the breach occurred

Answer

For breaches affecting fewer than 500 individuals, covered entities must notify HHS no later than 60 days after the end of the calendar year in which the breach was discovered.

(CCCP) Certified Corporate Compliance Professional Practice Test

(CCCP) Certified Corporate Compliance Professional Practice Test

CCCP Healthcare Compliance & HIPAA 2