CMAA HIPAA and Patient Confidentiality 3

Question 1

Which HIPAA violation tier involves willful neglect not corrected within 30 days?

Accepted Answer

Tier 4 - Willful neglect, not corrected

Answer

Tier 4 involves willful neglect not corrected within 30 days, carrying penalties of $50,000-$1.5 million per violation.

Question 2

A CMAA accidentally faxes lab results to the wrong number. What should they do first?

Accepted Answer

Notify the HIPAA Privacy Officer immediately

Answer

Any potential PHI breach must be reported to the Privacy Officer immediately for proper assessment and notification procedures.

Question 3

Which is NOT a permitted use of PHI without patient authorization?

Accepted Answer

Marketing a cosmetic procedure to patients

Answer

Marketing using PHI requires written patient authorization. Treatment, payment, operations, and legally required disclosures are permitted without authorization.

Question 4

What is a Business Associate Agreement (BAA)?

Accepted Answer

A written agreement ensuring a vendor will protect PHI

Answer

A BAA establishes how a third-party vendor must protect PHI, specifying permitted uses and required safeguards.

Question 5

A conscious patient's family member calls asking about the patient's condition. What should the CMAA do?

Accepted Answer

Ask the patient for permission before sharing

Answer

When a patient is present and capable, ask them directly for permission before sharing PHI with family members.

CMAA - Certified Medical Administrative Assistant Practice Test

CMAA - Certified Medical Administrative Assistant Practice Test

CMAA HIPAA and Patient Confidentiality 3