CHPS HIPAA Privacy Rule Compliance

Question 1

Under the HIPAA Privacy Rule, what is the maximum period a covered entity may retain a patient's authorization for use or disclosure of PHI?

Accepted Answer

Until the patient revokes it in writing

Answer

An authorization remains valid until the patient revokes it in writing or the expiration date stated in the authorization is reached.

Question 2

Which of the following is NOT considered protected health information (PHI) under HIPAA?

Accepted Answer

De-identified health data that meets the Safe Harbor standard

Answer

Data properly de-identified using the Safe Harbor method (removing all 18 identifiers) is no longer considered PHI under HIPAA.

Question 3

Under the HIPAA Minimum Necessary standard, which of the following disclosures is EXEMPT from the requirement?

Accepted Answer

Disclosures for treatment purposes to treating providers

Answer

The Minimum Necessary standard does not apply to disclosures to or requests by a healthcare provider for treatment purposes.

Question 4

A patient requests an amendment to their medical record under HIPAA. How long does the covered entity have to act on the request?

Accepted Answer

60 days

Answer

Under 45 CFR §164.526, a covered entity must act on an amendment request within 60 days of receipt.

Question 5

Which HIPAA provision requires covered entities to provide patients with an accounting of certain disclosures of their PHI?

Accepted Answer

Right to an Accounting of Disclosures

Answer

The Right to an Accounting of Disclosures (45 CFR §164.528) requires covered entities to provide a list of disclosures made for purposes other than treatment, payment, and operations.

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS HIPAA Privacy Rule Compliance