CHISSP CHISSP HIPAA Compliance & Healthcare Data Privacy

Question 1

Under HIPAA, which category of organizations is directly regulated as a 'covered entity'?

Accepted Answer

Healthcare providers, health plans, and healthcare clearinghouses

Answer

HIPAA's three categories of covered entities are healthcare providers who transmit health information electronically, health plans, and healthcare clearinghouses.

Question 2

How many of the 18 HIPAA-defined identifiers must be removed from patient data for it to qualify as 'de-identified' under the Safe Harbor method?

Accepted Answer

All 18 identifiers must be removed

Answer

The Safe Harbor de-identification method under §164.514(b) requires removal of all 18 specified identifiers and verification that no residual information could identify the individual.

Question 3

What is the maximum penalty per violation category per year under the HIPAA tiered civil monetary penalty structure (post-HITECH)?

Accepted Answer

$1,919,173 (adjusted annually for inflation)

Answer

HITECH increased HIPAA civil penalties to a tiered structure with a maximum of $100 per violation up to $1.5 million per violation category per year, adjusted for inflation.

Question 4

A healthcare provider wants to share patient records with a public health authority for disease surveillance without patient authorization. Is this permissible under HIPAA?

Accepted Answer

Yes, public health activities are a permitted disclosure without patient authorization

Answer

HIPAA §164.512(b) explicitly permits disclosures to public health authorities authorized to collect data for disease prevention and control without individual authorization.

Question 5

Which HIPAA rule specifically establishes the requirements for electronic transactions and code sets used in healthcare billing?

Accepted Answer

HIPAA Transactions and Code Sets Rule

Answer

The HIPAA Transactions and Code Sets Rule mandates standard electronic formats (ASC X12) and code sets (ICD, CPT, HCPCS) for administrative transactions like claims and remittances.

CHISSP - Certified Healthcare Information Systems Security Practitioner Practice Test

CHISSP - Certified Healthcare Information Systems Security Practitioner Practice Test

CHISSP CHISSP HIPAA Compliance & Healthcare Data Privacy