CEHRS HIPAA and Patient Confidentiality 4

Question 1

Under HIPAA, a 'limited data set' may be used for research, public health, or healthcare operations if which agreement is in place?

Accepted Answer

Data Use Agreement

Answer

A Data Use Agreement (DUA) is required before a covered entity may share a limited data set, which has had direct identifiers removed but may retain certain geographic and date information.

Question 2

Which of the following is an example of a PHYSICAL safeguard required under the HIPAA Security Rule?

Accepted Answer

Using facility access controls to limit unauthorized entry

Answer

Physical safeguards include facility access controls, workstation use policies, and device and media controls — measures that physically protect hardware and facilities.

Question 3

When a patient pays out-of-pocket in full for a service, HIPAA gives them the right to:

Accepted Answer

Request that the covered entity not share that service's information with a health plan

Answer

Under the 2013 Omnibus Rule, patients who pay out-of-pocket in full may restrict disclosure of that specific service to a health plan, and covered entities must honor this restriction.

Question 4

Which of the following is NOT included in the 18 identifiers that must be removed under HIPAA's Safe Harbor de-identification method?

Accepted Answer

Geographic data larger than a state

Answer

Under Safe Harbor, geographic subdivisions smaller than a state must be removed, but geographic data at the state level or larger is permitted.

Question 5

A Notice of Privacy Practices (NPP) must be provided to patients:

Accepted Answer

At the first service delivery, and the patient's good faith effort to obtain acknowledgment must be documented

Answer

Covered entities must provide the NPP at the first service delivery and make a good faith effort to obtain written acknowledgment of receipt from the patient.

(CEHRS) Certified Electronic Health Records Specialist Practice Test

(CEHRS) Certified Electronic Health Records Specialist Practice Test

CEHRS HIPAA and Patient Confidentiality 4