CMRT Privacy & Security 4

Question 1

Which HIPAA provision gives patients the right to request restrictions on how their PHI is used for treatment, payment, or operations?

Accepted Answer

Right to Request Restrictions

Answer

The HIPAA Privacy Rule grants patients the right to request that a covered entity restrict uses or disclosures of PHI, though the entity is generally not required to agree.

Question 2

When a covered entity discloses PHI for public health reporting purposes, this is considered:

Accepted Answer

A permitted disclosure under HIPAA without patient consent

Answer

HIPAA permits disclosures for public health activities such as reporting communicable diseases to public health authorities without patient authorization.

Question 3

Which of the following is a 'technical safeguard' required by the HIPAA Security Rule?

Accepted Answer

Implementing encryption for PHI transmitted over open networks

Answer

Technical safeguards include encryption, access controls, audit controls, and integrity controls that protect electronic PHI through technology.

Question 4

A patient has paid out-of-pocket in full for a service and requests that the covered entity not disclose that encounter to their health plan. The covered entity must:

Accepted Answer

Honor the restriction request

Answer

Under HITECH, when a patient pays out-of-pocket in full and requests restriction from their health plan, the covered entity is required to honor that restriction.

Question 5

What distinguishes a 'covered entity' from a 'business associate' under HIPAA?

Accepted Answer

Covered entities are healthcare providers, health plans, or clearinghouses that transmit PHI; business associates perform functions for them

Answer

Covered entities are defined entities (providers, plans, clearinghouses) directly subject to HIPAA, while business associates are third parties that perform services involving PHI on their behalf.

(CMRT) Certified Medical Records Technician Practice Test

(CMRT) Certified Medical Records Technician Practice Test

CMRT Privacy & Security 4