CHP Regulatory Compliance & Standards 2

Question 1

Under HIPAA, which federal agency is primarily responsible for enforcing the Privacy and Security Rules?

Accepted Answer

Office for Civil Rights (OCR) within HHS

Answer

The Office for Civil Rights (OCR) within the Department of Health and Human Services enforces HIPAA's Privacy and Security Rules.

Question 2

Which HIPAA rule specifically requires covered entities to implement administrative, physical, and technical safeguards for electronic PHI?

Accepted Answer

Security Rule

Answer

The HIPAA Security Rule mandates that covered entities protect electronic PHI through administrative, physical, and technical safeguards.

Question 3

A covered entity discovers a breach affecting 600 individuals. By what deadline must it notify the Secretary of HHS?

Accepted Answer

Within 60 days of the end of the calendar year in which the breach occurred

Answer

Breaches affecting fewer than 500 individuals must be reported to HHS within 60 days after the end of the calendar year in which the breach occurred.

Question 4

The HITECH Act expanded HIPAA compliance requirements by making which entities directly liable for HIPAA violations?

Accepted Answer

Business associates

Answer

The HITECH Act extended direct HIPAA liability to business associates, who were previously only bound by contract terms.

Question 5

Which of the following is NOT a required element of a HIPAA-compliant Notice of Privacy Practices (NPP)?

Accepted Answer

A list of all business associates and their specific data access rights

Answer

NPPs must describe uses/disclosures, patient rights, and contact information for the privacy officer, but do not require listing all business associates and their specific access rights.

(CHP) Certified HIPAA Professional Practice Test

(CHP) Certified HIPAA Professional Practice Test

CHP Regulatory Compliance & Standards 2