CHP HITECH Act & Electronic Health Records Compliance 2

Question 1

What are the four tiers of civil monetary penalties established by HITECH, listed from least to most severe?

Accepted Answer

Did not know, reasonable cause, willful neglect corrected, willful neglect not corrected

Answer

HITECH established four penalty tiers based on culpability: (1) did not know, (2) reasonable cause, (3) willful neglect corrected within 30 days, and (4) willful neglect not corrected.

Question 2

Under HITECH's breach notification rule, what is the maximum timeframe for notifying affected individuals after discovery of a breach?

Accepted Answer

60 days

Answer

Covered entities must notify affected individuals without unreasonable delay and no later than 60 days following the discovery of a breach of unsecured PHI.

Question 3

Under HITECH, when must breaches affecting fewer than 500 individuals be reported to the Secretary of HHS?

Accepted Answer

Annually, within 60 days after the end of each calendar year

Answer

Small breaches affecting fewer than 500 individuals must be logged and reported to HHS annually, submitting the log within 60 days after the close of each calendar year.

Question 4

Which HITECH provision requires a covered entity to honor a patient's request to restrict disclosure of PHI to a health plan?

Accepted Answer

The right to restrict disclosures when a patient pays out of pocket in full

Answer

HITECH requires covered entities to honor a patient's request to restrict disclosure to a health plan if the patient pays out of pocket in full for the item or service.

Question 5

What is the purpose of Health Information Exchanges (HIEs) as promoted under the HITECH Act?

Accepted Answer

To enable secure electronic sharing of patient health information across organizations to improve care coordination

Answer

HIEs facilitate the secure electronic movement of health information among organizations, improving care coordination, reducing duplicate testing, and enhancing patient safety.

(CHP) Certified HIPAA Professional Practice Test

(CHP) Certified HIPAA Professional Practice Test

CHP HITECH Act & Electronic Health Records Compliance 2