Certified Information Privacy Professional HIPAA Privacy Requirements 3

Question 1

What is the purpose of a HIPAA 'authorization' form as distinct from a 'consent' form?

Accepted Answer

Authorization permits uses/disclosures beyond TPO; consent was an optional general permission for TPO

Answer

HIPAA authorization is a specific document permitting uses or disclosures beyond treatment, payment, and operations, while the optional 'consent' form addressed general TPO uses.

Question 2

Which of the following is a required element of a valid HIPAA authorization?

Accepted Answer

A description of the PHI to be used or disclosed

Answer

A valid HIPAA authorization must include a description of the information to be used or disclosed with enough specificity so the patient understands what they are authorizing.

Question 3

Under HIPAA, what is an 'incidental disclosure'?

Accepted Answer

A secondary disclosure that occurs as a by-product of a permitted use, not considered a violation if reasonable safeguards are in place

Answer

Incidental disclosures are secondary disclosures that occur as a by-product of otherwise permitted disclosures and are not HIPAA violations if reasonable safeguards are followed.

Question 4

Which HIPAA provision addresses the rights of parents to access their minor child's PHI?

Accepted Answer

The Privacy Rule defers to state law and professional standards on parental access to minor PHI

Answer

HIPAA defers to state law and professional standards to determine parental access to minor PHI, creating variability across jurisdictions.

Question 5

What are the civil monetary penalty tiers under HIPAA, reflecting the level of culpability?

Accepted Answer

Did not know, reasonable cause, willful neglect corrected, willful neglect not corrected — escalating from $100 to $50,000 per violation

Answer

HIPAA's tiered civil monetary penalty structure ranges from $100/violation (did not know) to $50,000/violation (willful neglect not corrected), with annual caps per violation category.

Certified Information Privacy Professional Practice Test

Certified Information Privacy Professional Practice Test

Certified Information Privacy Professional HIPAA Privacy Requirements 3