CHPS Trivia 5

Question 1

What is 'workforce' as defined under HIPAA, and does it include volunteers and trainees?

Accepted Answer

Employees, volunteers, trainees, and other persons under the entity's direct control

Answer

HIPAA defines workforce as employees, volunteers, trainees, and other persons whose conduct is under the direct control of the covered entity, whether or not they are paid.

Question 2

Which term describes the HIPAA concept where a covered entity is accountable for the actions of its Business Associates as if the CE performed the service itself?

Accepted Answer

Chain of trust

Answer

The chain of trust concept under HIPAA reflects that covered entities must ensure their Business Associates protect PHI, extending accountability throughout the service delivery chain.

Question 3

A nurse accesses the medical records of a celebrity patient out of curiosity without a treatment purpose. Which HIPAA rule does this primarily violate?

Accepted Answer

Privacy Rule — impermissible use of PHI

Answer

Accessing PHI without a permissible purpose violates the HIPAA Privacy Rule's restrictions on uses and disclosures of PHI.

Question 4

What is the difference between a 'covered entity' and a 'hybrid entity' under HIPAA?

Accepted Answer

A hybrid entity is an organization that performs both covered and non-covered healthcare functions and designates its healthcare components

Answer

A hybrid entity is a covered entity that performs both covered healthcare functions and non-healthcare business functions, and it may designate which components are subject to HIPAA.

Question 5

Under the HIPAA Security Rule, what is an 'audit control' and why is it required?

Accepted Answer

Hardware, software, or procedural mechanisms to record and examine activity in systems containing ePHI; required to detect and investigate security incidents

Answer

Audit controls are mechanisms that record and examine activity in systems containing ePHI, enabling organizations to detect, investigate, and respond to security incidents and policy violations.

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS Trivia 5