HIPAA and Patient Confidentiality Flashcards
6 cards from real CMAA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 HIPAA and Patient Confidentiality flashcards as text
Which HIPAA violation tier involves willful neglect not corrected within 30 days?
Answer: Tier 4 - Willful neglect, not corrected
Tier 4 involves willful neglect not corrected within 30 days, carrying penalties of $50,000-$1.5 million per violation.
A CMAA accidentally faxes lab results to the wrong number. What should they do first?
Answer: Notify the HIPAA Privacy Officer immediately
Any potential PHI breach must be reported to the Privacy Officer immediately for proper assessment and notification procedures.
Which is NOT a permitted use of PHI without patient authorization?
Answer: Marketing a cosmetic procedure to patients
Marketing using PHI requires written patient authorization. Treatment, payment, operations, and legally required disclosures are permitted without authorization.
What is a Business Associate Agreement (BAA)?
Answer: A written agreement ensuring a vendor will protect PHI
A BAA establishes how a third-party vendor must protect PHI, specifying permitted uses and required safeguards.
A conscious patient's family member calls asking about the patient's condition. What should the CMAA do?
Answer: Ask the patient for permission before sharing
When a patient is present and capable, ask them directly for permission before sharing PHI with family members.
Which physical safeguard is required under the HIPAA Security Rule?
Answer: Facility access controls for areas with ePHI
Physical safeguards include facility access controls to limit physical access to areas with electronic health information systems.