CET Regulatory Compliance & Legal Framework 2

Question 1

Under HIPAA's minimum necessary standard, a sonographer sharing echocardiography results should disclose:

Accepted Answer

Only the information required for the specific purpose

Answer

The minimum necessary standard limits disclosure to only the information needed to accomplish the intended purpose.

Question 2

A patient requests a copy of their echocardiogram report. Under HIPAA, the covered entity must provide access within:

Accepted Answer

30 days, with a possible 30-day extension

Answer

HIPAA requires covered entities to provide access to PHI within 30 days, extendable by another 30 days with written notice.

Question 3

Which situation represents a permitted disclosure of PHI without patient authorization under HIPAA?

Accepted Answer

Reporting a gunshot wound to law enforcement as required by state law

Answer

HIPAA permits disclosures required by law, including mandatory reporting of certain injuries to law enforcement.

Question 4

When transmitting echocardiography images electronically, HIPAA Security Rule requires:

Accepted Answer

Encryption and access controls for all ePHI in transit and at rest

Answer

The HIPAA Security Rule requires administrative, physical, and technical safeguards—including encryption and access controls—for all electronic PHI.

Question 5

A HIPAA breach involving unsecured PHI of 600 patients requires notification to:

Accepted Answer

Patients and HHS; media notification is also required for breaches over 500 in a state

Answer

Breaches affecting 500+ individuals in a state or jurisdiction require notification to patients, HHS, and prominent media outlets in that state.

(CET) Certified Echocardiography Technician Practice Test