CMAA HIPAA and Patient Confidentiality 3

Question 1

Which HIPAA violation tier involves willful neglect not corrected within 30 days?

Accepted Answer

Tier 4 - Willful neglect, not corrected

Answer

Tier 1 - Lack of knowledge

Answer

Tier 2 - Reasonable cause

Answer

Tier 3 - Willful neglect, corrected

Question 2

A CMAA accidentally faxes lab results to the wrong number. What should they do first?

Accepted Answer

Notify the HIPAA Privacy Officer immediately

Answer

Delete the fax log

Answer

Call the patient to apologize

Answer

Wait to see if anyone complains

Question 3

Which is NOT a permitted use of PHI without patient authorization?

Accepted Answer

Marketing a cosmetic procedure to patients

Answer

Treatment coordination between providers

Answer

Submitting claims for payment

Answer

Reporting suspected child abuse

Question 4

What is a Business Associate Agreement (BAA)?

Accepted Answer

A written agreement ensuring a vendor will protect PHI

Answer

A contract between practices to share patients

Answer

An employment contract for staff

Answer

A patient consent form

Question 5

A conscious patient's family member calls asking about the patient's condition. What should the CMAA do?

Accepted Answer

Ask the patient for permission before sharing

Answer

Provide a general update since family is always authorized

Answer

Refuse to share any information

Answer

Share if the family member knows the patient's DOB

Question 6

Which physical safeguard is required under the HIPAA Security Rule?

Accepted Answer

Facility access controls for areas with ePHI

Answer

Encrypting all emails

Answer

Annual staff background checks

Answer

Using only paper records