CHPS Certified in Healthcare Privacy and Security 5

Question 1

Under HIPAA, what is the 'right of access' that patients have regarding their PHI?

Accepted Answer

The right to inspect and obtain a copy of their PHI held in a designated record set

Answer

The HIPAA right of access gives individuals the right to inspect and receive a copy of their PHI maintained in a covered entity's designated record set.

Question 2

Which of the following is the strongest authentication method for protecting access to an EHR system?

Accepted Answer

Multi-factor authentication combining a password and a hardware token

Answer

Multi-factor authentication (MFA) combining something you know (password) and something you have (hardware token) provides the strongest protection against unauthorized access.

Question 3

A healthcare organization's contingency plan must include which of the following as a required component under the HIPAA Security Rule?

Accepted Answer

A data backup plan

Answer

The HIPAA Security Rule requires a data backup plan as a required implementation specification within the contingency plan standard.

Question 4

Which HIPAA penalty tier applies when a covered entity knew of a violation and failed to correct it within 30 days?

Accepted Answer

$10,000–$50,000 per violation with a $1.5 million annual cap (Tier 3/4 range)

Answer

Willful neglect violations that are not corrected fall in the highest penalty tiers, ranging from $10,000 to $50,000 per violation with an annual cap of $1.5 million.

Question 5

What distinguishes a 'Notice of Privacy Practices' (NPP) from a patient authorization under HIPAA?

Accepted Answer

An NPP informs patients of how PHI may be used; authorization is patient permission for a specific use

Answer

The NPP is a general notice informing patients of their rights and the entity's privacy practices, while an authorization is a specific patient-signed permission for a use or disclosure not otherwise permitted.

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS Certified in Healthcare Privacy and Security 5