CHP Patient Assessment & Clinical Evaluation 2 — Questions and Answers
Question 1: A clinician needs to share a patient's psychiatric evaluation findings with a specialist for a second opinion. Under HIPAA, this disclosure falls under which category?
- Payment operations
- Treatment purposes (Correct answer)
- Health oversight
- Judicial proceedings
Correct answer: Treatment purposes
Sharing PHI with another provider for a second opinion is a Treatment purpose under TPO, which does not require patient authorization.
Question 2: Which type of clinical notes receives heightened privacy protection under HIPAA and cannot be included in the general designated record set?
- Discharge summaries
- Psychotherapy notes (Correct answer)
- Medication reconciliation records
- Surgical assessments
Correct answer: Psychotherapy notes
Psychotherapy notes are specially protected under the Privacy Rule and are kept separate from the medical record, requiring specific authorization for most disclosures.
Question 3: A hospital's quality improvement team wants to use patient clinical assessment data to evaluate care outcomes. Under HIPAA, this is permissible as:
- A research activity requiring IRB approval
- A healthcare operations activity (Correct answer)
- A public health reporting requirement
- A law enforcement disclosure
Correct answer: A healthcare operations activity
Quality improvement and outcomes evaluation using patient data are classified as healthcare operations, which do not require patient authorization.
Question 4: A patient requests access to all records related to their clinical evaluation. The covered entity may deny access without providing an opportunity to review if the records are:
- More than seven years old
- Psychotherapy notes (Correct answer)
- Held by a business associate
- Stored in paper format only
Correct answer: Psychotherapy notes
Psychotherapy notes are explicitly excluded from the patient's right of access under the HIPAA Privacy Rule.
Question 5: Under HIPAA's minimum necessary standard, when a nurse retrieves clinical assessment data for a patient's routine care, the nurse should access:
- The patient's complete lifetime record
- Only information relevant to the current care task (Correct answer)
- Any information authorized by the medical director
- All records from the past 12 months
Correct answer: Only information relevant to the current care task
The minimum necessary standard requires workforce members to access only the PHI needed for their specific job function.
Question 6: A researcher wants to use identifiable patient assessment data without authorization. Which mechanism under HIPAA allows this?
- A signed Business Associate Agreement
- An IRB waiver of authorization or Privacy Board approval (Correct answer)
- A data sharing agreement with the covered entity
- A state law waiver of privacy requirements
Correct answer: An IRB waiver of authorization or Privacy Board approval
Researchers may use identifiable PHI without patient authorization only if an IRB or Privacy Board grants a waiver meeting specific criteria.
Question 7: When a patient's clinical evaluation reveals information about a communicable disease, a covered entity may disclose PHI to public health authorities:
- Only with written patient authorization
- Without authorization as a permitted public health activity (Correct answer)
- Only after obtaining a court order
- Only if the patient is deceased
Correct answer: Without authorization as a permitted public health activity
HIPAA permits disclosure to public health authorities to prevent or control disease without patient authorization under the public health activities exception.
CHP Patient Assessment & Clinical Evaluation 2
A clinician needs to share a patient's psychiatric evaluation findings with a specialist for a second opinion.
Under HIPAA, this disclosure falls under which category?