CHPS Privacy Program Management 3

Question 1

A healthcare system's Privacy Officer is reviewing third-party vendor relationships. Which of the following vendors requires a Business Associate Agreement?

Accepted Answer

A medical transcription company that transcribes physician notes containing PHI

Answer

A medical transcription company creates, receives, or maintains PHI on behalf of the covered entity and is a business associate requiring a BAA.

Question 2

In healthcare privacy program management, what is the purpose of conducting periodic privacy audits?

Accepted Answer

To verify ongoing compliance with privacy policies, identify gaps, and drive continuous improvement

Answer

Privacy audits verify that policies are being followed, identify compliance gaps and risks, and provide data to drive program improvement over time.

Question 3

Which of the following is a key privacy consideration when implementing a Health Information Exchange (HIE)?

Accepted Answer

Establishing governance agreements that address consent models, data use limitations, and break-the-glass procedures

Answer

HIE governance agreements must address how participant organizations handle consent, limit data use to appropriate purposes, and manage emergency access (break-the-glass) scenarios.

Question 4

Under HIPAA, what must a covered entity do if it maintains PHI about deceased individuals?

Accepted Answer

Maintain HIPAA protections for PHI of deceased individuals for 50 years after death

Answer

HIPAA protections extend to PHI of deceased individuals for 50 years following death, after which the information is no longer subject to HIPAA.

Question 5

When designing a privacy compliance monitoring program, which approach provides the strongest ongoing assurance?

Accepted Answer

Periodic random audits combined with automated access log monitoring and incident trend analysis

Answer

Combining periodic random audits with automated log monitoring and trend analysis provides multi-layered, continuous assurance across the privacy program.

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS Privacy Program Management 3