CHPC Patient Rights and Access to Health Records 1

Question 1

Under HIPAA, how long does a covered entity generally have to respond to a patient's request for access to their PHI?

Accepted Answer

30 days, with a possible 30-day extension

Answer

HIPAA requires covered entities to act on an access request within 30 days, with one 30-day extension if written notice is provided.

Question 2

Which of the following is NOT a valid reason for a covered entity to deny a patient access to their PHI?

Accepted Answer

The PHI was created by another provider

Answer

The fact that PHI was created by another provider is not a valid HIPAA basis for denying patient access; the covered entity must still provide access to PHI it holds.

Question 3

A patient requests an amendment to their medical record. Under HIPAA, how long does the covered entity have to act on this request?

Accepted Answer

60 days, with a possible 30-day extension

Answer

HIPAA allows covered entities 60 days to respond to amendment requests, with one 30-day extension if written notice of the delay is given.

Question 4

Which right allows patients to receive a list of disclosures of their PHI made by a covered entity in the past six years?

Accepted Answer

Right of accounting of disclosures

Answer

The HIPAA right of accounting of disclosures allows individuals to request a log of certain PHI disclosures made without their authorization.

Question 5

A patient asks a covered entity to restrict the disclosure of their PHI to their health plan for a service they paid for out of pocket. Under HIPAA, the covered entity must:

Accepted Answer

Honor the restriction

Answer

HIPAA requires covered entities to agree to restrictions on disclosures to health plans when the patient paid out of pocket in full for the service.

CHPC - Certified in Healthcare Privacy Compliance Practice Test

CHPC - Certified in Healthcare Privacy Compliance Practice Test

CHPC Patient Rights and Access to Health Records 1