CHP Breach Notification & Legal Enforcement 3

Question 1

Which federal agency handles criminal prosecution of knowing HIPAA violations?

Accepted Answer

Department of Justice

Answer

The Department of Justice (DOJ) is responsible for prosecuting knowing violations of HIPAA that rise to the level of criminal conduct.

Question 2

A breach affects 600 patients at a hospital. In addition to notifying individuals and HHS, what additional step is required?

Accepted Answer

Provide notice to prominent media outlets in the affected area

Answer

Breaches affecting 500 or more individuals in a state or jurisdiction require notice to prominent media outlets serving that area.

Question 3

Under HIPAA, what is the annual cap on civil monetary penalties for identical violations within the same calendar year?

Accepted Answer

$1,500,000

Answer

The annual cap for civil monetary penalties for violations of the same provision is $1,500,000 per calendar year.

Question 4

A covered entity discovers a breach on March 1. The 60-day notification clock begins on which date?

Accepted Answer

The date the breach was discovered

Answer

The 60-day notification period runs from the date of discovery of the breach, not the date the breach occurred.

Question 5

Which of the following is NOT one of the four factors in the HIPAA breach risk assessment?

Accepted Answer

The financial net worth of the covered entity

Answer

The four-factor risk assessment does not include the financial status of the covered entity; it focuses on the nature of the PHI, the recipient, acquisition/viewing, and mitigation.

(CHP) Certified HIPAA Professional Practice Test

(CHP) Certified HIPAA Professional Practice Test

CHP Breach Notification & Legal Enforcement 3