Patient Rights and Access to Health Records Flashcards
6 cards from real CHPC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Patient Rights and Access to Health Records flashcards as text
Which HIPAA right permits an individual to request that a covered entity communicate with them at a specific location or by a specific method?
Answer: Right to confidential communications
The right to confidential communications allows individuals to ask covered entities to contact them through alternative means or at alternative locations.
If a covered entity denies a patient's amendment request, what must the entity provide?
Answer: Written denial with the basis and information about filing a statement of disagreement
When denying an amendment, the covered entity must provide a written denial that includes the basis for denial and the patient's right to submit a statement of disagreement.
Under the HITECH Act, which entity extended individual rights regarding PHI to business associates?
Answer: Business associates are now directly liable for honoring certain patient rights
HITECH made business associates directly liable under HIPAA, including obligations related to individual rights such as access and accounting of disclosures.
A patient submits a written request to restrict how their PHI is used for treatment purposes. The covered entity may:
Answer: Grant or deny the restriction at its discretion (except the mandatory out-of-pocket rule)
For most restriction requests, covered entities have discretion to agree or disagree, with the exception of the mandatory restriction when a patient pays fully out of pocket.
Which of the following is included in the disclosures that must appear in an accounting of disclosures?
Answer: Disclosures for public health activities without authorization
Accounting of disclosures covers disclosures made without patient authorization for purposes such as public health, law enforcement, and oversight activities.
When must a covered entity inform a patient that it cannot provide access to their PHI in electronic form?
Answer: At the time the entity denies or cannot fulfill the electronic format request
Covered entities must inform individuals when electronic PHI is not available in the requested format so the patient may choose an alternative.