Clinical Informatics Certification Privacy & Security Regulations 3

Question 1

Which of the following is NOT one of the 18 HIPAA Safe Harbor de-identification identifiers that must be removed?

Accepted Answer

Patient's blood type

Answer

Blood type is a clinical data element but is not one of the 18 categories of identifiers enumerated in the HIPAA Safe Harbor de-identification standard.

Question 2

The Expert Determination method of HIPAA de-identification requires a statistician to certify that re-identification risk is:

Accepted Answer

Very small

Answer

Under Expert Determination, a qualified statistician must certify that the risk of identifying an individual is 'very small,' though no specific numerical threshold is mandated.

Question 3

A clinical informaticist is building a query tool for a research database. Which principle best describes limiting each researcher's access to only the data fields needed for their specific study?

Accepted Answer

Minimum necessary standard

Answer

The minimum necessary standard requires that disclosures and requests for PHI be limited to the least amount needed to accomplish the intended purpose.

Question 4

Under GDPR, which legal basis most commonly applies when a European hospital processes patient health data for treatment purposes?

Accepted Answer

Public interest in public health

Answer

GDPR Article 9(2)(i) permits processing of special category health data when necessary for public interest in public health, which commonly applies to healthcare treatment.

Question 5

A state law provides patients with stronger privacy protections than HIPAA's federal minimums. Which standard applies?

Accepted Answer

The state law applies because it is more protective

Answer

HIPAA sets a federal floor, and state laws that are more stringent (more protective of patient privacy) are not preempted and must be followed.

Clinical Informatics Certification Practice Test

Clinical Informatics Certification Practice Test

Clinical Informatics Certification Privacy & Security Regulations 3