CHPC Privacy Program Management 5

Question 1

A covered entity must mitigate harmful effects of a known privacy violation. Which action BEST reflects the mitigation standard?

Accepted Answer

Retrieving misdirected PHI and obtaining assurances from the recipient that it was destroyed

Answer

Deleting all audit logs related to the incident

Answer

Charging the patient for credit monitoring

Answer

Waiting for OCR to direct the response

Question 2

For a breach affecting 500 or more residents of a single state, which notification is required in addition to individual and HHS notice?

Accepted Answer

Notice to prominent media outlets serving that state or jurisdiction

Answer

Notice to the state medical board only

Answer

Notice to all business associates

Answer

Notice to the local police department

Question 3

Which program element addresses federal confidentiality rules for substance use disorder treatment records that may exceed HIPAA requirements?

Accepted Answer

42 CFR Part 2 compliance

Answer

FERPA compliance

Answer

GLBA safeguards

Answer

COPPA consent

Question 4

Which of the following must a covered entity document about privacy complaints it receives?

Accepted Answer

All complaints received and their disposition, if any

Answer

Only complaints filed in writing with OCR

Answer

Only complaints that result in sanctions

Answer

Nothing, since documentation is optional

Question 5

A privacy officer is building a data inventory as a program foundation. What is its PRIMARY value?

Accepted Answer

It identifies where PHI resides, how it flows, and who accesses it, enabling risk-based controls

Answer

It satisfies the NPP distribution requirement

Answer

It eliminates the need for business associate agreements

Answer

It replaces the need for a security risk analysis

Question 6

Under the Breach Notification Rule, who bears the burden of proof that a required notification was made or that an impermissible use was not a breach?

Accepted Answer

The covered entity or business associate

Answer

The state attorney general

Answer

The affected individual

Answer

OCR

Question 7

Which approach BEST ensures privacy is considered when a hospital implements a new patient-facing mobile app?

Accepted Answer

Conduct a privacy impact assessment during design and procurement, applying privacy by design

Answer

Rely on the vendor's marketing materials

Answer

Review the app only after a complaint is received

Answer

Add a disclaimer to the app store listing

CHPC Privacy Program Management 5

What Practice Test Geeks adds beyond an AI chat for CHPC

Sources & references