CHPC De-identification of Protected Health Information 2

Question 1

Under HIPAA's Safe Harbor method, specific dates must be removed EXCEPT which component?

Accepted Answer

The year alone (for individuals under 90)

Answer

Safe Harbor requires removing specific dates (birth, admission, discharge, death) but permits retaining the year alone, provided the individual is not 90 years of age or older.

Question 2

Under the Safe Harbor method, how must the age of an individual who is 90 years or older be reported in a de-identified dataset?

Accepted Answer

Their age must be grouped into an aggregate category such as '90 or older'

Answer

The Safe Harbor method requires that individuals aged 90 or older have their age collapsed into a single category (e.g., '90 or older') because extreme ages can uniquely identify an individual.

Question 3

Which of the following is NOT among the 18 identifiers that must be removed under HIPAA's Safe Harbor de-identification method?

Accepted Answer

Diagnosis codes (ICD codes)

Answer

ICD diagnosis codes are clinical codes that describe conditions, not personal identifiers; the 18 Safe Harbor identifiers target information that can be used to identify a specific individual.

Question 4

A researcher wants to use de-identified patient data for a clinical study. Which statement about HIPAA requirements is accurate?

Accepted Answer

De-identified data may be used for research without HIPAA authorization requirements

Answer

Because de-identified data is no longer PHI, the HIPAA Privacy Rule's authorization requirements do not apply, and researchers may use or receive it without patient authorization.

Question 5

Which of the following identifiers is specifically included among the 18 Safe Harbor categories that must be removed?

Accepted Answer

Vehicle identifiers and serial numbers

Answer

Vehicle identifiers and serial numbers are explicitly listed among the 18 Safe Harbor identifiers, as they can be traced back to a registered owner.

CHPC - Certified in Healthcare Privacy Compliance Practice Test

CHPC - Certified in Healthcare Privacy Compliance Practice Test

CHPC De-identification of Protected Health Information 2