CHPS Certified in Healthcare Privacy and Security MCQ 2

Question 1

Under HIPAA, which of the following is NOT considered Protected Health Information (PHI)?

Accepted Answer

De-identified health data meeting the Safe Harbor standard

Answer

Data that meets the Safe Harbor de-identification standard (removing 18 specified identifiers) is no longer PHI and is not subject to HIPAA protections.

Question 2

A hospital's Security Officer discovers that a workforce member accessed patient records without a valid treatment, payment, or operations reason. This is BEST described as:

Accepted Answer

A workforce sanction policy violation

Answer

Inappropriate access by workforce members without authorization violates the workforce sanction policy, which covered entities must have in place under the HIPAA Security Rule.

Question 3

Which HIPAA Privacy Rule standard allows covered entities to use or disclose PHI for their own treatment, payment, and healthcare operations without patient authorization?

Accepted Answer

Permitted uses and disclosures

Answer

The permitted uses and disclosures provision allows covered entities to use or disclose PHI for TPO (treatment, payment, healthcare operations) without individual authorization.

Question 4

A risk analysis under the HIPAA Security Rule must identify threats to the confidentiality, integrity, and availability of ePHI. Which document type formally captures this assessment?

Accepted Answer

Risk Assessment Report

Answer

The Risk Assessment Report documents identified threats, vulnerabilities, likelihood, and impact, fulfilling the Security Rule's requirement for a formal, documented risk analysis.

Question 5

Under the HITECH Act, which entity tier has a maximum annual civil monetary penalty of $1.9 million per violation category?

Accepted Answer

Willful neglect – not corrected

Answer

Willful neglect that is not corrected carries the highest penalty tier, up to $1.9 million per identical violation category per calendar year.

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS Certified in Healthcare Privacy and Security MCQ 2