CIPP/US Healthcare & Financial Privacy 1

Question 1

Under HIPAA, 'Protected Health Information' (PHI) is defined as individually identifiable health information that is:

Accepted Answer

Held or transmitted by a covered entity or its business associate in any form or medium

Answer

PHI encompasses any individually identifiable health information created, received, maintained, or transmitted by a covered entity or business associate, regardless of format.

Question 2

Which of the following entities are classified as 'covered entities' under the HIPAA Privacy Rule?

Accepted Answer

Health plans, healthcare clearinghouses, and healthcare providers who transmit health information electronically

Answer

HIPAA covered entities are specifically health plans, healthcare clearinghouses, and healthcare providers that conduct covered transactions electronically.

Question 3

The HIPAA Privacy Rule's 'minimum necessary' standard requires covered entities to:

Accepted Answer

Limit PHI uses and disclosures to the minimum necessary to accomplish the intended purpose

Answer

The minimum necessary standard requires covered entities to make reasonable efforts to limit PHI access and disclosure to only what is needed for the specific purpose.

Question 4

Under HIPAA, a 'business associate' is best described as:

Accepted Answer

A person or entity that performs functions on behalf of a covered entity that involve the use or disclosure of PHI

Answer

A business associate is a person or organization that performs services for a covered entity that involve creating, receiving, maintaining, or transmitting PHI.

Question 5

The HIPAA Security Rule's requirements apply specifically to which type of protected health information?

Accepted Answer

Electronic protected health information (ePHI) only

Answer

The HIPAA Security Rule applies specifically to ePHI — PHI that is created, received, maintained, or transmitted in electronic form.

CIPP/US - Certified Information Privacy Professional/United States Exam Practice Test

CIPP/US - Certified Information Privacy Professional/United States Exam Practice Test

CIPP/US Healthcare & Financial Privacy 1