CMAA HIPAA and Patient Confidentiality 2

Question 1

Under HIPAA, which is considered Protected Health Information (PHI)?

Accepted Answer

A medical record number linked to a diagnosis

Answer

PHI includes any individually identifiable health information, such as a medical record number linked to a diagnosis.

Question 2

How long must a covered entity retain HIPAA-related documentation?

Accepted Answer

6 years from creation or last effective date

Answer

HIPAA requires retaining policies, procedures, and authorization forms for 6 years from creation or last effective date, whichever is later.

Question 3

A pharmaceutical rep asks for a list of patients on a specific medication. What is the correct response?

Accepted Answer

Decline as it violates HIPAA

Answer

Sharing medication lists with pharmaceutical reps violates HIPAA as unauthorized disclosure for non-treatment, payment, or operations purposes.

Question 4

What does the HIPAA Security Rule primarily protect?

Accepted Answer

Electronic PHI (ePHI)

Answer

The Security Rule specifically addresses electronic PHI through administrative, physical, and technical safeguards.

Question 5

Which exemplifies the HIPAA minimum necessary standard?

Accepted Answer

Giving billing staff only financial data needed for claims

Answer

The minimum necessary standard limits PHI access to only what is needed for the intended purpose.

CMAA - Certified Medical Administrative Assistant Practice Test