CHC HIPAA Privacy and Security 5

Question 1

A workforce member accesses the records of a celebrity patient out of curiosity without clinical need. This is best described as:

Accepted Answer

A HIPAA Privacy Rule violation due to impermissible access

Answer

Accessing PHI without a legitimate purpose violates the minimum necessary and permissible use standards of the HIPAA Privacy Rule.

Question 2

Under HIPAA, when must a covered entity obtain a patient's written authorization before disclosing PHI?

Accepted Answer

For most marketing communications using PHI

Answer

Most marketing communications that use PHI require the patient's written authorization under the HIPAA Privacy Rule.

Question 3

Which of the following correctly describes the HIPAA 'Safe Harbor' method of de-identification?

Accepted Answer

18 specific categories of identifiers are removed and the entity has no actual knowledge the data could re-identify the individual

Answer

The Safe Harbor method requires removal of 18 specific identifier categories and a statement that the covered entity has no actual knowledge the remaining information could identify the individual.

Question 4

Under the HITECH Act, which party became directly liable for compliance with certain HIPAA Security Rule provisions?

Accepted Answer

Business associates directly, not just through BAAs

Answer

HITECH made business associates directly liable for compliance with many HIPAA Security Rule and Privacy Rule provisions, not just contractually liable through BAAs.

Question 5

A hospital workforce member loses an unencrypted laptop containing PHI for 800 patients. Which statement is correct?

Accepted Answer

This is a presumed breach requiring notification unless the four-factor risk assessment shows low probability of compromise

Answer

Loss of an unencrypted laptop with PHI is a presumed breach under the Omnibus Rule, requiring notification unless a risk assessment demonstrates low probability that PHI was compromised.

CHC - Certified in Healthcare Compliance Practice Test

CHC - Certified in Healthcare Compliance Practice Test

CHC HIPAA Privacy and Security 5