CHC HIPAA Privacy and Security 4

Question 1

Under HIPAA's Security Rule, 'integrity' of ePHI means:

Accepted Answer

ePHI is not altered or destroyed in an unauthorized manner

Answer

Integrity under the Security Rule means ensuring that ePHI is not altered or destroyed in an unauthorized manner.

Question 2

A Business Associate Agreement (BAA) must include which of the following provisions?

Accepted Answer

Permitted and required uses and disclosures of PHI by the business associate

Answer

A BAA must describe the permitted and required uses and disclosures of PHI that the business associate may make on behalf of the covered entity.

Question 3

Which HIPAA standard governs the electronic exchange of health information for claims and remittance advice?

Accepted Answer

The Transactions and Code Sets Rule

Answer

The HIPAA Transactions and Code Sets Rule establishes standards for electronic health care transactions, including claims and remittance advice using ASC X12 standards.

Question 4

A covered entity discovers a breach on March 1. By what date must affected individuals be notified?

Accepted Answer

April 30 (within 60 days)

Answer

Individuals must be notified of a breach without unreasonable delay and no later than 60 days following discovery of the breach.

Question 5

Under HIPAA, which of the following represents a permissible secondary use of PHI for research without patient authorization?

Accepted Answer

Using a limited data set with a data use agreement for research

Answer

A covered entity may share a limited data set (with certain direct identifiers removed) for research under a data use agreement without patient authorization.

CHC - Certified in Healthcare Compliance Practice Test

CHC - Certified in Healthcare Compliance Practice Test

CHC HIPAA Privacy and Security 4