CPCA CPCA Medical Records and HIPAA Privacy 3

Question 1

What is a HIPAA breach as defined under the Breach Notification Rule?

Accepted Answer

An impermissible use or disclosure of PHI that compromises its security or privacy

Answer

Any accidental access to a patient chart by clinical staff

Answer

A patient complaint about billing

Answer

A lost paper chart recovered within 24 hours

Question 2

How soon must a covered entity notify affected individuals after discovering a PHI breach?

Accepted Answer

Within 30 days

Answer

Immediately

Answer

Within 60 days

Answer

Within 90 days

Question 3

When must a HIPAA breach affecting 500 or more individuals be reported to the HHS Secretary?

Accepted Answer

Within 60 days of discovery

Answer

Within 30 days of discovery

Answer

Within 60 days of the end of the calendar year in which it was discovered

Answer

Immediately upon discovery

Question 4

A patient asks a dermatology practice to amend an entry in their medical record they believe is incorrect. What is the practice required to do?

Accepted Answer

Review the request and respond within 60 days, accepting or denying with written explanation

Answer

Delete the original entry immediately

Answer

Accept the amendment automatically

Answer

Refer the patient to their physician only

Question 5

What is the purpose of a HIPAA Risk Analysis?

Accepted Answer

To identify potential vulnerabilities and threats to ePHI

Answer

To audit billing codes for accuracy

Answer

To calculate the cost of HIPAA compliance

Answer

To review staff performance on documentation

Question 6

Which of the following is an example of de-identified health information under HIPAA?

Accepted Answer

A data set with all 18 HIPAA identifiers removed

Answer

A patient report with initials and ZIP code

Answer

An electronic record with the name replaced by a patient ID number

Answer

A fax with the patient name blacked out but date of birth visible