CHP CHP Business Associates & Vendor Management

Question 1

Under HIPAA, a Business Associate Agreement (BAA) is required when a vendor does which of the following?

Accepted Answer

Creates, receives, maintains, or transmits PHI on behalf of a covered entity

Answer

A BAA is required whenever a vendor creates, receives, maintains, or transmits PHI while performing services or functions on behalf of a covered entity.

Question 2

Which of the following is NOT a required element of a HIPAA Business Associate Agreement?

Accepted Answer

The business associate's annual revenue and profit margins

Answer

Financial figures such as annual revenue are not required elements of a HIPAA Business Associate Agreement.

Question 3

When a business associate discovers a breach of unsecured PHI, it must notify the covered entity:

Accepted Answer

Without unreasonable delay and no later than 60 days after discovery

Answer

Business associates must notify the covered entity of a breach without unreasonable delay and within no more than 60 days after discovery.

Question 4

Under HIPAA, subcontractors of business associates who handle PHI are treated as:

Accepted Answer

Business associates with direct HIPAA obligations

Answer

Subcontractors that create, receive, maintain, or transmit PHI on behalf of a business associate are themselves considered business associates with direct HIPAA obligations.

Question 5

Which federal legislation made business associates directly subject to HIPAA compliance obligations?

Accepted Answer

The Health Information Technology for Economic and Clinical Health (HITECH) Act

Answer

The HITECH Act of 2009 made business associates directly liable for HIPAA compliance, extending obligations beyond covered entities.

(CHP) Certified HIPAA Professional Practice Test

(CHP) Certified HIPAA Professional Practice Test

CHP CHP Business Associates & Vendor Management