CHP Safety & Infection Control 3

Question 1

During a public health emergency involving an infectious disease outbreak, a covered entity wants to share patient PHI with public health authorities without patient authorization. Which HIPAA provision permits this?

Accepted Answer

The Public Health Activities exception allows disclosure to public health authorities authorized by law to collect data

Answer

HIPAA's Public Health Activities exception (45 CFR § 164.512(b)) permits covered entities to disclose PHI to authorized public health authorities for activities such as disease surveillance and outbreak response.

Question 2

A nurse accidentally sticks herself with a needle used on an HIV-positive patient. The hospital's occupational health team requests the patient's HIV status. What does HIPAA permit in this scenario?

Accepted Answer

HIPAA permits disclosure of the patient's HIV status to the source patient's treating provider and the exposed worker's healthcare provider for treatment purposes

Answer

HIPAA's treatment exception and workforce safety provisions allow disclosure of the source patient's relevant PHI to facilitate occupational exposure management.

Question 3

Which OSHA standard works in conjunction with HIPAA to protect healthcare workers from bloodborne pathogen exposure risks?

Accepted Answer

OSHA Bloodborne Pathogens Standard (29 CFR 1910.1030)

Answer

OSHA's Bloodborne Pathogens Standard requires employers to protect workers from exposure to blood and other potentially infectious materials, complementing HIPAA's privacy protections for patient information related to these exposures.

Question 4

A covered entity's security policy requires that all workstations be logged off or locked when unattended. This requirement primarily addresses which HIPAA Security Rule implementation specification?

Accepted Answer

Automatic Logoff

Answer

The Automatic Logoff implementation specification (addressable) under the Access Control standard requires entities to implement electronic procedures that terminate sessions after a predetermined period of inactivity.

Question 5

A hospital emergency department uses a shared 'break-the-glass' override procedure to access ePHI during a mass casualty event. Under HIPAA, this is best characterized as:

Accepted Answer

A permissible emergency access procedure that must be documented and reviewed after the event

Answer

HIPAA permits emergency access procedures and requires covered entities to establish them; however, all emergency access events must be logged and reviewed to detect inappropriate use.

(CHP) Certified HIPAA Professional Practice Test

(CHP) Certified HIPAA Professional Practice Test

CHP Safety & Infection Control 3