CPCA CPCA Medical Records and HIPAA Privacy 2

Question 1

What document must a patient sign to authorize the release of their PHI to a third party not involved in treatment, payment, or operations?

Accepted Answer

HIPAA Authorization Form

Answer

Notice of Privacy Practices

Answer

ABN Form

Answer

Assignment of Benefits

Question 2

Under HIPAA, a 'business associate' is best described as:

Accepted Answer

A vendor or contractor who handles PHI on behalf of a covered entity

Answer

Any employee of a covered entity

Answer

A patient's insurance company

Answer

A state health department

Question 3

What must a dermatology practice provide to new patients at their first visit regarding their privacy rights?

Accepted Answer

Notice of Privacy Practices (NPP)

Answer

HIPAA Security Rule summary

Answer

Business Associate Agreement

Answer

Release of Information Form

Question 4

A dermatology medical biller posts patient names and diagnosis codes on a shared office whiteboard visible to other patients. This is a violation of:

Accepted Answer

HIPAA Privacy Rule

Answer

OSHA regulations

Answer

The Fair Debt Collection Practices Act

Answer

CMS Conditions of Participation

Question 5

Which of the following is an example of a HIPAA Security Rule safeguard?

Accepted Answer

Requiring unique user IDs and passwords for electronic health record access

Answer

Giving each staff member the same login credentials for efficiency

Answer

Faxing PHI without a cover sheet to save time

Answer

Leaving patient charts at the front desk

Question 6

What is the maximum civil monetary penalty per violation category under HIPAA for willful neglect not corrected?

Accepted Answer

$1,900,000 per calendar year per violation category

Answer

$10,000

Answer

$50,000

Answer

$100,000