CHP HIPAA Privacy & Security Rules 3

Question 1

Under the HIPAA Security Rule, which of the following is classified as a Physical Safeguard?

Accepted Answer

Workstation use policy

Answer

Workstation use is a physical safeguard standard that governs the proper functions performed at workstations and the physical environment of those workstations.

Question 2

The Minimum Necessary Standard under HIPAA requires covered entities to:

Accepted Answer

Share only the minimum amount of PHI needed to accomplish the intended purpose

Answer

The Minimum Necessary Standard requires covered entities to make reasonable efforts to limit PHI access and disclosures to the minimum needed to accomplish the intended purpose.

Question 3

Which entity enforces the HIPAA Privacy and Security Rules against covered entities?

Accepted Answer

The Office for Civil Rights (OCR) within HHS

Answer

The HHS Office for Civil Rights (OCR) is the primary enforcer of the HIPAA Privacy and Security Rules and investigates complaints and conducts audits.

Question 4

A covered entity's Notice of Privacy Practices (NPP) must be provided to patients:

Accepted Answer

At the time of first service delivery

Answer

Covered entities must provide the NPP no later than the date of first service delivery and make a good-faith effort to obtain written acknowledgment of receipt.

Question 5

Under the HITECH Act, business associates became directly liable for HIPAA compliance in which year?

Accepted Answer

2013

Answer

The HIPAA Omnibus Rule (2013) implemented HITECH Act provisions making business associates directly liable for compliance with applicable HIPAA Privacy and Security Rule requirements.

(CHP) Certified HIPAA Professional Practice Test

(CHP) Certified HIPAA Professional Practice Test

CHP HIPAA Privacy & Security Rules 3