CHAA CHAA HIPAA Privacy and Security 5

Question 1

A patient requests a copy of their medical record. Under HIPAA, within what time frame must the covered entity generally act on the request?

Accepted Answer

30 days, with one possible 30-day extension

Answer

Covered entities must act within 30 days of an access request and may extend once by up to 30 days with written notice.

Question 2

Which of the following is a business associate that requires a Business Associate Agreement with the hospital?

Accepted Answer

An outside medical transcription company

Answer

An outside vendor that creates or handles PHI on the covered entity's behalf is a business associate.

Question 3

A waiting-room patient overhears another patient's name called out despite the facility's reasonable safeguards. How is this classified under HIPAA?

Accepted Answer

A permitted incidental use or disclosure

Answer

Incidental disclosures are permitted when reasonable safeguards and minimum necessary practices are in place.

Question 4

Which type of health information almost always requires a specific patient authorization before disclosure, even for treatment or payment?

Accepted Answer

Psychotherapy notes

Answer

Psychotherapy notes kept separate from the medical record receive special protection and generally require specific authorization.

Question 5

Under HIPAA, who is generally recognized as the personal representative of an unemancipated minor?

Accepted Answer

A parent or legal guardian

Answer

Parents or guardians with authority to make health care decisions are generally treated as the minor's personal representative, with some state-law exceptions.

CHAA - Certified Healthcare Access Associate Practice Test

CHAA - Certified Healthcare Access Associate Practice Test

CHAA CHAA HIPAA Privacy and Security 5