CPMS HIPAA and Patient Privacy Questions and Answers

Question 1

A medical scribe is working remotely from home. Which of the following actions represents a potential HIPAA Security Rule violation?

Accepted Answer

Using a personal laptop that is not encrypted to access the EHR.

Answer

Connecting to the clinic's server using a secure VPN.

Answer

Having a unique, complex password for their EHR login.

Answer

Ensuring their computer screen is not visible to others in the room.

Question 2

While documenting a patient encounter, a scribe overhears a nurse in the hallway discussing another patient's recent diagnosis with a colleague. According to HIPAA, this is an example of:

Accepted Answer

A reportable breach of confidentiality.

Answer

An incidental disclosure.

Answer

A disclosure for treatment purposes.

Answer

A permitted use for healthcare operations.

Question 3

Which of the following is considered Protected Health Information (PHI) under HIPAA?

Accepted Answer

A patient's appointment reminder email sent to their personal account.

Answer

A patient's de-identified X-ray image used in a research study.

Answer

A hospital's publicly available directory of physician specialties.

Answer

A conversation between two doctors about a medical journal article.

Question 4

A patient notices an incorrect date of birth in their electronic health record and requests a correction. According to the HIPAA Privacy Rule, what right is the patient exercising?

Accepted Answer

Right to Amend PHI

Answer

Right to an Accounting of Disclosures

Answer

Right to Request Restrictions

Answer

Right of Access

Question 5

A medical scribe is asked by their physician to access the medical record of a celebrity who is not their patient, out of curiosity. What HIPAA principle would this action directly violate?

Accepted Answer

The Minimum Necessary Rule

Answer

The Security Rule

Answer

The Breach Notification Rule

Answer

The Patient Safety Rule

Question 6

A medical scribe's role is to document the physician-patient encounter. Under HIPAA, the scribe is considered a:

Accepted Answer

Business Associate

Answer

Covered Entity

Answer

Personal Representative

Answer

Clearinghouse