CPHIMS CPHIMS Healthcare Privacy and Security 4

Question 1

A healthcare organization wants to share patient data for a research study without obtaining individual authorizations. Which HIPAA mechanism allows this?

Accepted Answer

Limited Data Set with a Data Use Agreement

Answer

A Limited Data Set (with certain direct identifiers removed) combined with a Data Use Agreement allows sharing of PHI for research, public health, or health care operations without individual authorization.

Question 2

Which of the following best describes the concept of 'data integrity' in healthcare information security?

Accepted Answer

Ensuring data is accurate, complete, and has not been improperly altered

Answer

Data integrity ensures that health information is accurate, complete, and protected from unauthorized modification, forming a key pillar of the CIA (Confidentiality, Integrity, Availability) triad.

Question 3

A covered entity discovers that a laptop containing unencrypted PHI was stolen. Under HIPAA, this event is presumed to be:

Accepted Answer

A breach unless the organization can demonstrate low probability of PHI compromise

Answer

Under HIPAA, an impermissible use or disclosure is presumed to be a breach unless the covered entity can demonstrate through a four-factor risk assessment that there is a low probability that PHI was compromised.

Question 4

Which security control is MOST effective at preventing unauthorized physical access to server rooms containing healthcare data?

Accepted Answer

Badge-access systems with biometric verification

Answer

Physical access controls such as badge-access with biometric verification directly prevent unauthorized individuals from physically entering restricted areas housing sensitive healthcare systems.

Question 5

What is the role of a Chief Privacy Officer (CPO) in a healthcare organization?

Accepted Answer

Overseeing compliance with privacy laws and policies governing patient information

Answer

The CPO is responsible for developing, implementing, and maintaining the organization's privacy program, ensuring compliance with applicable privacy laws and regulations.

CPHIMS Exam Practice Test

CPHIMS Exam Practice Test

CPHIMS CPHIMS Healthcare Privacy and Security 4