CPCA CPCA Medical Records and HIPAA Privacy 3

Question 1

What is a HIPAA breach as defined under the Breach Notification Rule?

Accepted Answer

An impermissible use or disclosure of PHI that compromises its security or privacy

Answer

A HIPAA breach is an impermissible acquisition, access, use, or disclosure of PHI that is presumed to compromise its privacy unless exceptions apply.

Question 2

How soon must a covered entity notify affected individuals after discovering a PHI breach?

Accepted Answer

Within 30 days

Answer

The HIPAA Breach Notification Rule requires covered entities to notify affected individuals without unreasonable delay, and no later than 60 days after discovery, but the standard practice is within 30 days.

Question 3

When must a HIPAA breach affecting 500 or more individuals be reported to the HHS Secretary?

Accepted Answer

Within 60 days of discovery

Answer

Large breaches affecting 500 or more individuals must be reported to the HHS Secretary promptly and no later than 60 days after discovery.

Question 4

A patient asks a dermatology practice to amend an entry in their medical record they believe is incorrect. What is the practice required to do?

Accepted Answer

Review the request and respond within 60 days, accepting or denying with written explanation

Answer

HIPAA gives patients the right to request amendments, and covered entities must respond within 60 days, providing written denial reasons if applicable.

Question 5

What is the purpose of a HIPAA Risk Analysis?

Accepted Answer

To identify potential vulnerabilities and threats to ePHI

Answer

HIPAA's Security Rule requires covered entities to conduct a risk analysis to identify threats and vulnerabilities to the confidentiality, integrity, and availability of ePHI.

CPCA Exam Practice Test

CPCA Exam Practice Test

CPCA CPCA Medical Records and HIPAA Privacy 3