CHC HIPAA Privacy and Security 3

Question 1

Under the HIPAA Privacy Rule, the 'minimum necessary' standard does NOT apply to which type of disclosure?

Accepted Answer

Disclosures for treatment purposes to healthcare providers

Answer

The minimum necessary standard does not apply to disclosures made to or requests by a healthcare provider for treatment purposes.

Question 2

A covered entity may use or disclose PHI without patient authorization for which of the following purposes?

Accepted Answer

Reporting a gunshot wound to law enforcement as required by state law

Answer

HIPAA permits disclosure to law enforcement when required by law, such as mandatory reporting of gunshot wounds.

Question 3

What is the maximum civil monetary penalty per violation category for violations where the covered entity did not know and could not have known of the violation?

Accepted Answer

$100 per violation, up to $25,000 per year

Answer

The lowest tier of civil monetary penalties applies to unknowing violations at $100–$50,000 per violation, up to $25,000 per identical violation per year.

Question 4

Under HIPAA's Security Rule, which implementation specification is 'required' versus 'addressable' for the Workstation Use standard?

Accepted Answer

Workstation Use is required; covered entities must implement it

Answer

The Workstation Use standard under Physical Safeguards is required, meaning covered entities must implement policies governing proper workstation use.

Question 5

A patient requests an accounting of disclosures. Which type of disclosure must be included in the accounting?

Accepted Answer

Disclosures to public health authorities as required by law

Answer

Disclosures required by law, such as those to public health authorities, must be included in the accounting of disclosures.

CHC - Certified in Healthcare Compliance Practice Test

CHC - Certified in Healthcare Compliance Practice Test

CHC HIPAA Privacy and Security 3