CEHRS HIPAA and Patient Confidentiality 2

Question 1

Under HIPAA, which of the following is considered a 'covered entity'?

Accepted Answer

A health plan that pays for medical care

Answer

Covered entities under HIPAA include health plans, healthcare clearinghouses, and healthcare providers who transmit health information electronically.

Question 2

What is the maximum civil monetary penalty per violation category for HIPAA violations caused by willful neglect that is not corrected?

Accepted Answer

$1,500,000 per year

Answer

Willful neglect violations that are not corrected carry penalties of up to $50,000 per violation with a $1.5 million annual cap per violation category.

Question 3

A patient requests an amendment to their medical record. Under HIPAA, within how many days must the covered entity respond?

Accepted Answer

60 days

Answer

Covered entities must act on a request for amendment within 60 days, with a possible 30-day extension if they notify the individual.

Question 4

Which HIPAA rule specifically requires covered entities to implement technical, administrative, and physical safeguards for electronic PHI?

Accepted Answer

Security Rule

Answer

The HIPAA Security Rule requires covered entities and business associates to implement safeguards specifically to protect electronic PHI (ePHI).

Question 5

Under the Minimum Necessary standard, which scenario is EXEMPT from its requirements?

Accepted Answer

Disclosures to the patient themselves

Answer

The Minimum Necessary standard does not apply to disclosures to or requests by the individual who is the subject of the information.

(CEHRS) Certified Electronic Health Records Specialist Practice Test

(CEHRS) Certified Electronic Health Records Specialist Practice Test

CEHRS HIPAA and Patient Confidentiality 2