CHP HIPAA Privacy & Security Rules 2

Question 1

Under the HIPAA Privacy Rule, what is the maximum period a covered entity may maintain an authorization form signed by an individual?

Accepted Answer

6 years from the date of creation or last effective date

Answer

The Privacy Rule requires covered entities to retain documentation, including signed authorizations, for 6 years from the date of creation or the date it was last in effect, whichever is later.

Question 2

Which of the following constitutes a valid expiration for a HIPAA authorization?

Accepted Answer

All of the above

Answer

A valid authorization must include an expiration date, event, or condition, and any of these three options satisfies that requirement under the Privacy Rule.

Question 3

A hospital's Privacy Officer discovers a workforce member improperly accessed 15 patient records out of curiosity with no malicious intent. What is the FIRST step the Privacy Officer should take?

Accepted Answer

Document the breach and assess whether notification is required

Answer

The first step is to document the incident and perform a breach risk assessment to determine if notification obligations under the Breach Notification Rule are triggered.

Question 4

Under the Security Rule, which of the following is an ADDRESSABLE implementation specification?

Accepted Answer

Automatic logoff

Answer

Automatic logoff is an addressable specification, meaning covered entities must implement it if reasonable and appropriate, or document why an equivalent alternative was chosen.

Question 5

A business associate experiences a ransomware attack that encrypts ePHI. Under HIPAA, when does the covered entity's breach notification clock typically start?

Accepted Answer

When the BA notifies the covered entity

Answer

Under the Breach Notification Rule, the 60-day notification clock for the covered entity starts when the business associate notifies the covered entity of the breach.

(CHP) Certified HIPAA Professional Practice Test

(CHP) Certified HIPAA Professional Practice Test

CHP HIPAA Privacy & Security Rules 2