Patient Rights and Access to Health Records Flashcards
6 cards from real CHPC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Patient Rights and Access to Health Records flashcards as text
A minor patient's parent requests access to the child's mental health records. Under HIPAA, who controls access in this situation?
Answer: State law governs, and HIPAA defers to it in most minor-rights scenarios
HIPAA defers to state law when it comes to a minor's rights and parental access, meaning state statutes on minor confidentiality generally control.
A deceased patient's executor requests access to the decedent's medical records. HIPAA allows covered entities to disclose this PHI to:
Answer: A personal representative of the decedent, such as an executor
HIPAA permits disclosure of a decedent's PHI to their personal representative, such as an executor or administrator of the estate.
Which format must a covered entity use when a patient requests an electronic copy of PHI maintained in an electronic health record (EHR)?
Answer: The format requested by the patient, if readily producible
Covered entities must provide the electronic copy in the format requested by the patient if it is readily producible; otherwise, they must offer an agreed-upon alternative.
A patient's right to access their PHI under HIPAA applies to which of the following?
Answer: A designated record set maintained by the covered entity
The right of access applies specifically to PHI contained in a designated record set, which includes medical records and billing records used for decisions about the individual.
Under HIPAA, psychotherapy notes receive special protection. Which statement best describes this?
Answer: They require a separate, specific authorization from the patient for most disclosures
Psychotherapy notes are separately defined and require a specific patient authorization for most disclosures, beyond the general authorization used for other PHI.
Which action by a covered entity constitutes retaliation prohibited under HIPAA?
Answer: Threatening a patient for exercising their right to file a complaint with HHS
HIPAA prohibits covered entities from retaliating against individuals who exercise their rights, including filing complaints with the Department of Health and Human Services.