CEC Privacy and Security Standards 2

Question 1

Under HIPAA, which of the following is considered Protected Health Information (PHI)?

Accepted Answer

A patient's diagnosis combined with their name

Answer

PHI is individually identifiable health information that includes identifiers such as name combined with health data like a diagnosis.

Question 2

A Marketplace Navigator receives a paper application containing an applicant's SSN. What is the most appropriate way to store this document?

Accepted Answer

Store it in a locked cabinet with restricted access

Answer

Sensitive documents containing SSNs must be secured in locked storage with access limited to authorized personnel.

Question 3

Which federal law primarily governs the privacy of student education records and is relevant when assisting student-aged applicants?

Accepted Answer

FERPA

Answer

FERPA (Family Educational Rights and Privacy Act) protects the privacy of student education records.

Question 4

An enrollment counselor accidentally sends an applicant's eligibility information to the wrong email address. This is an example of a:

Accepted Answer

Unauthorized disclosure requiring notification

Answer

Sending PII or PHI to an unintended recipient constitutes an unauthorized disclosure that may trigger breach notification requirements.

Question 5

What does 'minimum necessary' mean in the context of HIPAA privacy rules for enrollment counselors?

Accepted Answer

Access or share only the amount of PHI needed to complete the task

Answer

The minimum necessary standard requires that access to PHI be limited to only what is needed to accomplish the intended purpose.

(CEC) Certified Enrollment Counselor Practice Test