CHPS HIPAA Privacy Rule Compliance

Question 1

Under the HIPAA Privacy Rule, what is the maximum period a covered entity may retain a patient's authorization for use or disclosure of PHI?

Accepted Answer

Until the patient revokes it in writing

Answer

Six years from the date of creation

Answer

One year from the date of signing

Answer

Five years from the date of creation

Question 2

Which of the following is NOT considered protected health information (PHI) under HIPAA?

Accepted Answer

De-identified health data that meets the Safe Harbor standard

Answer

A patient's diagnosis shared in a treatment record

Answer

A billing record linking a patient's name to a procedure

Answer

A photograph of a patient taken during treatment

Question 3

Under the HIPAA Minimum Necessary standard, which of the following disclosures is EXEMPT from the requirement?

Accepted Answer

Disclosures for treatment purposes to treating providers

Answer

Disclosures to health plan auditors

Answer

Disclosures for payment reconciliation

Answer

Disclosures to business associates

Question 4

A patient requests an amendment to their medical record under HIPAA. How long does the covered entity have to act on the request?

Accepted Answer

60 days

Answer

30 days

Answer

45 days

Answer

90 days

Question 5

Which HIPAA provision requires covered entities to provide patients with an accounting of certain disclosures of their PHI?

Accepted Answer

Right to an Accounting of Disclosures

Answer

Right of Access

Answer

Right to Amend

Answer

Right to Request Restrictions

Question 6

Under HIPAA, which of the following entities is classified as a 'hybrid entity'?

Accepted Answer

An organization that performs both covered and non-covered functions and designates its healthcare components

Answer

A hospital that also provides long-term care

Answer

A business associate that also provides clinical services

Answer

A health plan that covers both dental and medical services