CCCP Healthcare Compliance & HIPAA 4

Question 1

Under HIPAA, psychotherapy notes receive special protection because:

Accepted Answer

They require patient authorization for most disclosures, even those permitted for other PHI

Answer

Psychotherapy notes have heightened protections under the Privacy Rule, requiring written patient authorization for disclosures that would otherwise be permitted for general PHI.

Question 2

The OIG's seven elements of an effective compliance program include all of the following EXCEPT:

Accepted Answer

Establishing a guaranteed whistleblower immunity program

Answer

The OIG's seven elements do not include a guaranteed whistleblower immunity program; they focus on policies, training, communication, monitoring, enforcement, response, and standards.

Question 3

A healthcare entity subject to a Corporate Integrity Agreement (CIA) with the OIG is typically required to:

Accepted Answer

Retain an Independent Review Organization (IRO) to audit claims

Answer

CIAs typically require entities to engage an IRO to conduct independent reviews of billing practices and submit findings to the OIG.

Question 4

Under HIPAA, a covered entity's Notice of Privacy Practices (NPP) must be provided to patients:

Accepted Answer

No later than the date of first service delivery

Answer

Covered entities must provide the NPP no later than the date of first service delivery to a new patient, with good-faith efforts to obtain written acknowledgment.

Question 5

Which scenario would most likely trigger mandatory reporting to HHS under the HIPAA Breach Notification Rule for a large breach (500+ individuals)?

Accepted Answer

An unencrypted laptop containing ePHI is stolen from an employee's car

Answer

Theft of an unencrypted device containing ePHI constitutes a breach of unsecured PHI requiring notification to HHS and affected individuals.

(CCCP) Certified Corporate Compliance Professional Practice Test

(CCCP) Certified Corporate Compliance Professional Practice Test

CCCP Healthcare Compliance & HIPAA 4