CEHRS HIPAA and Patient Confidentiality 2

Question 1

Under HIPAA, which of the following is considered a 'covered entity'?

Accepted Answer

A health plan that pays for medical care

Answer

A software developer who sells EHR systems

Answer

An employer who manages employee wellness programs internally

Answer

A medical device manufacturer

Question 2

What is the maximum civil monetary penalty per violation category for HIPAA violations caused by willful neglect that is not corrected?

Accepted Answer

$1,500,000 per year

Answer

$10,000

Answer

$50,000

Answer

$100,000

Question 3

A patient requests an amendment to their medical record. Under HIPAA, within how many days must the covered entity respond?

Accepted Answer

60 days

Answer

30 days

Answer

90 days

Answer

120 days

Question 4

Which HIPAA rule specifically requires covered entities to implement technical, administrative, and physical safeguards for electronic PHI?

Accepted Answer

Security Rule

Answer

Privacy Rule

Answer

Breach Notification Rule

Answer

Enforcement Rule

Question 5

Under the Minimum Necessary standard, which scenario is EXEMPT from its requirements?

Accepted Answer

Disclosures to the patient themselves

Answer

Disclosures to insurers for payment purposes

Answer

Disclosures to public health authorities

Answer

Disclosures to employers

Question 6

A business associate agreement (BAA) must be established when a covered entity shares PHI with a vendor. Which vendor would NOT require a BAA?

Accepted Answer

A janitorial company that cleans exam rooms

Answer

A billing company that processes claims

Answer

A cloud storage provider hosting ePHI

Answer

A transcription service handling dictated notes

Question 7

Which of the following is NOT one of the eight patient rights granted under the HIPAA Privacy Rule?

Accepted Answer

Right to receive care at no cost

Answer

Right to access PHI

Answer

Right to request restrictions on disclosures

Answer

Right to an accounting of disclosures