CMAA - Certified Medical Administrative Assistant HIPAA and Patient Confidentiality Questions and Answers

Question 1

A patient's spouse calls the medical office requesting the results of their partner's recent blood test.
The patient has not signed a release of information form authorizing this disclosure.
What is the most appropriate response from the CMAA?

Accepted Answer

Inform the spouse that due to privacy regulations, the information cannot be released without the patient's written consent.

Answer

Provide the results since they are married.

Answer

Ask the spouse to verify the patient's date of birth before providing the results.

Answer

Place the spouse on hold and ask the nurse to give them the results.

Question 2

Under the Health Insurance Portability and Accountability Act (HIPAA), which of the following is the best example of Protected Health Information (PHI)?

Accepted Answer

A patient's name listed on an appointment sign-in sheet.

Answer

A medical textbook in the office library.

Answer

Publicly available health statistics from the CDC.

Answer

An anonymous patient satisfaction survey.

Question 3

A CMAA is tasked with disposing of old paper documents containing patient demographic and billing information. Which of the following methods is compliant with HIPAA regulations?

Accepted Answer

Using a cross-cut shredder to destroy the documents until they are unreadable and cannot be reconstructed.

Answer

Blacking out the patient's name with a marker before placing in the trash.

Answer

Placing the documents in a standard office recycling bin.

Answer

Tearing the documents in half before discarding them.

Question 4

A CMAA at the front desk is speaking with a patient on the phone about their medical condition. The conversation is loud enough to be overheard by other patients in the waiting room. This is a potential violation of which HIPAA principle?

Accepted Answer

The requirement for reasonable safeguards.

Answer

The "minimum necessary" standard.

Answer

The Breach Notification Rule.

Answer

The patient's right to amend PHI.

Question 5

What is the primary purpose of the HIPAA Privacy Rule?

Accepted Answer

To give patients rights over their health information and to set limits on its use and disclosure without their authorization.

Answer

To establish a patient's right to sue their healthcare provider for malpractice.

Answer

To streamline the process for electronic billing and claims submission.

Answer

To set national standards for the security of electronic protected health information (ePHI).

Question 6

Which of the following scenarios constitutes a HIPAA breach that would require notification to the affected individuals?

Accepted Answer

An unencrypted laptop containing the PHI of 600 patients is stolen from a billing manager's car.

Answer

A pharmacist calls the provider's office to verify a patient's prescription dosage.

Answer

A nurse discusses a patient's case with a consulting physician who is also involved in the patient's care.

Answer

A CMAA accesses their own medical record out of curiosity using the office EHR system.