CEC Privacy and Security Standards 3

Question 1

A Certified Enrollment Counselor discovers a colleague is accessing applicant files out of curiosity, not for work purposes. The counselor should:

Accepted Answer

Report it to a supervisor or compliance officer

Answer

Unauthorized access to applicant records is a privacy violation that must be reported through proper compliance channels.

Question 2

Which of the following best describes a 'Business Associate Agreement' (BAA) under HIPAA?

Accepted Answer

A written agreement ensuring vendors protect PHI appropriately

Answer

A BAA is a contract requiring business associates who handle PHI to safeguard it in compliance with HIPAA rules.

Question 3

Which type of security safeguard involves using physical measures such as locks, badge readers, and security cameras to protect data?

Accepted Answer

Physical safeguards

Answer

Physical safeguards under HIPAA include physical measures, policies, and procedures to protect electronic information systems and related buildings from unauthorized access.

Question 4

An enrollment counselor is helping an applicant over the phone. Before discussing account details, the counselor should:

Accepted Answer

Verify the applicant's identity using security questions or a PIN

Answer

Identity verification before disclosing account information prevents unauthorized disclosure to impostors.

Question 5

Under the ACA Marketplace rules, which of the following is a permitted use of applicant data collected during enrollment?

Accepted Answer

Using it to determine eligibility for coverage and financial assistance

Answer

Applicant data collected through Marketplace enrollment may only be used for purposes directly related to determining eligibility and enrollment.

(CEC) Certified Enrollment Counselor Practice Test

(CEC) Certified Enrollment Counselor Practice Test

CEC Privacy and Security Standards 3