CPR Records Management & Confidentiality 1 — Questions and Answers
Question 1: What is the primary purpose of a records retention schedule in a professional office?
- To determine how long different types of records must be kept before disposal (Correct answer)
- To track which employees have accessed specific files
- To organize records alphabetically by department
- To calculate storage costs for filing cabinets
Correct answer: To determine how long different types of records must be kept before disposal
A records retention schedule specifies how long each category of record must be kept to meet legal, regulatory, and operational requirements before it can be disposed of.
Question 2: Which federal law primarily governs the confidentiality of patient medical records and health information?
- FERPA
- HIPAA (Correct answer)
- FMLA
- OSHA
Correct answer: HIPAA
HIPAA (Health Insurance Portability and Accountability Act) establishes federal standards for protecting sensitive patient health information from being disclosed without patient consent.
Question 3: When a receptionist receives a written request for confidential client files from someone claiming to be an auditor, what is the correct first step?
- Provide the files immediately since auditors have legal authority
- Direct the person to the break room while retrieving the files
- Verify the person's identity and authorization with a supervisor before releasing any files (Correct answer)
- Photocopy all files and keep copies for the office record
Correct answer: Verify the person's identity and authorization with a supervisor before releasing any files
Identity and authorization must always be verified with a supervisor before releasing confidential records, regardless of the requestor's stated role, to prevent unauthorized disclosure.
Question 4: The 'need-to-know' principle in records management means that access to confidential information should be:
- Available to any employee who requests it for business reasons
- Restricted to individuals whose job duties require that specific information (Correct answer)
- Shared with all senior staff to ensure organizational transparency
- Limited to only the records manager and department heads
Correct answer: Restricted to individuals whose job duties require that specific information
The need-to-know principle limits access to confidential information strictly to employees whose specific job responsibilities require it, minimizing the risk of unauthorized disclosure.
Question 5: Which type of paper shredder provides the highest level of security for destroying confidential documents?
- Strip-cut shredder
- Straight-cut shredder
- Cross-cut shredder
- Micro-cut shredder (Correct answer)
Correct answer: Micro-cut shredder
Micro-cut shredders produce the smallest particles, making reconstruction of documents virtually impossible and providing the highest security level for confidential materials.
Question 6: According to standard business records management practices, general business correspondence is typically retained for:
- 1 year
- 3 years
- 7 years (Correct answer)
- Permanently
Correct answer: 7 years
General business correspondence is commonly retained for 7 years to satisfy most statutory limitations and audit requirements, though specific retention periods may vary by jurisdiction.
Question 7: A visitor requests access to the employee personnel directory kept at the front desk. What should the receptionist do?
- Provide the directory since it is kept at the front desk for convenience
- Refuse access and explain that personnel information is confidential (Correct answer)
- Ask the visitor to fill out a form and come back later
- Call the employee being looked up to get their permission first
Correct answer: Refuse access and explain that personnel information is confidential
Personnel directories and employee information are confidential records that should not be shared with external visitors without proper authorization from management.
CPR Records Management & Confidentiality 1
What is the primary purpose of a records retention schedule in a professional office?