CHP Safety & Infection Control 2

Question 1

Under HIPAA, which entity is primarily responsible for establishing physical safeguards to prevent unauthorized access to areas where PHI is stored or processed?

Accepted Answer

The covered entity or business associate

Answer

HIPAA's Security Rule requires covered entities and business associates to implement physical safeguards to protect electronic PHI from unauthorized access.

Question 2

A healthcare worker suspects a colleague is not following proper hand hygiene protocols before accessing workstations containing ePHI. What is the BEST first step?

Accepted Answer

Document the behavior and report it to the Privacy or Security Officer

Answer

Workforce members should report potential policy violations to the Privacy or Security Officer, who can investigate and address the issue appropriately.

Question 3

Which type of facility control helps prevent contamination of PHI-containing systems in a clinical environment by limiting access to clean versus dirty zones?

Accepted Answer

Physical separation or zoning protocols

Answer

Physical separation of clean and dirty zones is an infection control and safety measure that also supports HIPAA physical safeguard requirements by limiting unauthorized access.

Question 4

A hospital is implementing a new HIPAA-compliant workstation policy in isolation rooms used for infectious patients. Which measure BEST addresses both infection control and HIPAA security?

Accepted Answer

Use dedicated, easily disinfectable workstations with automatic screen lock and session timeout

Answer

Dedicated, disinfectable workstations with automatic screen lock and session timeout address both infection control (cleanable surfaces) and HIPAA security (access controls).

Question 5

Which HIPAA Security Rule standard specifically requires covered entities to protect against unauthorized physical access to systems storing ePHI?

Accepted Answer

Physical Safeguards — Facility Access Controls

Answer

The Physical Safeguards — Facility Access Controls standard requires covered entities to implement policies to limit physical access to electronic information systems while ensuring authorized access.

(CHP) Certified HIPAA Professional Practice Test

(CHP) Certified HIPAA Professional Practice Test

CHP Safety & Infection Control 2