CHAA - Certified Healthcare Access Associate HIPAA Privacy and Security 6

Question 1

Under HIPAA's Minimum Necessary Standard, what principle must covered entities follow when using or disclosing PHI?

Accepted Answer

Disclose only the amount of PHI reasonably needed to accomplish the intended purpose

Answer

The Minimum Necessary Standard requires covered entities to make reasonable efforts to limit PHI use and disclosure to what is needed for the specific purpose, reducing unnecessary exposure of patient information.

Question 2

Which of the following is NOT one of the 18 identifiers that make health information considered Protected Health Information (PHI)?

Accepted Answer

Patient's blood type alone

Answer

Blood type by itself is a clinical value not on HIPAA's list of 18 identifiers. Dates, phone numbers, and medical record numbers are all listed identifiers that, combined with health data, create PHI.

Question 3

Under the HIPAA Breach Notification Rule, covered entities must notify affected individuals of a breach within how many days of discovery?

Accepted Answer

60 days

Answer

HIPAA requires covered entities to notify affected individuals without unreasonable delay and no later than 60 calendar days after discovering a breach of unsecured PHI.

Question 4

What is a Business Associate Agreement (BAA) under HIPAA?

Accepted Answer

An agreement between a covered entity and a vendor who handles PHI on its behalf

Answer

A BAA is a required written contract between a covered entity and a business associate — any third party that creates, receives, or transmits PHI on behalf of that entity — ensuring the associate safeguards the information.

Question 5

Under the HIPAA Security Rule, which category of safeguards covers physical measures such as workstation security and facility access controls?

Accepted Answer

Physical safeguards

Answer

Physical safeguards are the tangible, real-world measures required to protect electronic PHI, including controls over facility access, workstation use, and device and media handling.

CHAA - Certified Healthcare Access Associate Practice Test

CHAA - Certified Healthcare Access Associate Practice Test

CHAA - Certified Healthcare Access Associate HIPAA Privacy and Security 6