CEHRS Release of Information (ROI)

Question 1

Under HIPAA, what is the maximum number of days a covered entity has to respond to a patient's request to access their own medical records before an extension may be invoked?

Accepted Answer

30 days

Answer

15 days

Answer

60 days

Answer

90 days

Question 2

Which of the following is a REQUIRED element of a valid HIPAA authorization for the release of medical records?

Accepted Answer

A description of the information to be used or disclosed

Answer

The patient's insurance policy number

Answer

The signature of the treating physician

Answer

The date of the patient's next scheduled appointment

Question 3

Under 42 CFR Part 2, which category of records receives STRICTER confidentiality protections than standard HIPAA rules?

Accepted Answer

Substance use disorder treatment records

Answer

Pediatric immunization records

Answer

Workers' compensation injury reports

Answer

Radiology imaging files

Question 4

A patient has died. Their surviving spouse requests a copy of the deceased patient's complete medical record. Who has the legal authority to authorize this release?

Accepted Answer

The personal representative or executor of the estate

Answer

The patient's primary care physician

Answer

Any immediate family member aged 18 or older

Answer

The hospital's risk management department

Question 5

Which of the following scenarios permits a covered entity to release PHI WITHOUT a patient's written authorization?

Accepted Answer

A public health authority investigating a communicable disease outbreak

Answer

A patient's employer requesting attendance-verification records

Answer

A marketing firm requesting patient contact information for a health survey

Answer

An attorney requesting records for a civil personal-injury lawsuit

Question 6

What is the primary purpose of the HIPAA 'minimum necessary' standard as applied to release of information?

Accepted Answer

To limit PHI disclosures to the smallest amount reasonably needed to accomplish the intended purpose

Answer

To ensure patients receive the least invasive treatment available

Answer

To minimize the per-page fee charged for copying medical records

Answer

To reduce the total number of ROI requests a facility must process annually