CVS - Assessment Patient Confidentiality and HIPAA Questions and Answers

Question 1

A patient's adult child calls the pharmacy asking if their mother's blood pressure medication has been refilled, explaining they are on their way to pick it up.
Which of the following is the most appropriate response to comply with HIPAA?

Accepted Answer

"Due to privacy laws, I can only provide information to the patient unless she has given us specific permission. Are you listed as an authorized person on her account?"

Answer

"Yes, the prescription for her lisinopril is ready for pickup."

Answer

"I can see there is a prescription ready, but I cannot tell you who it is for or what it is."

Answer

"You will need to ask your mother to call us directly to confirm her prescription status."

Question 2

Which of the following is the best way to dispose of paper documents containing Protected Health Information (PHI), such as old prescription labels or patient profiles?

Accepted Answer

Placing them in a designated, secure shred bin for confidential destruction.

Answer

Tearing them into several pieces before placing them in the regular trash.

Answer

Blacking out the patient's name with a marker before putting them in the recycling bin.

Answer

Storing them in a box in the back room until the end of the year.

Question 3

The HIPAA "Minimum Necessary" standard is a key principle of patient privacy. Which of the following scenarios best demonstrates the correct application of this standard?

Accepted Answer

When an insurance company calls to verify a patient's date of birth for a claim, the pharmacy technician provides only the date of birth.

Answer

A technician gives a new cashier full access to the pharmacy computer system so they can look up patient profiles if needed.

Answer

A pharmacist tells a patient's spouse the names of all the medications the patient is currently taking.

Answer

To save time, a technician looks up a patient's entire medication history before the patient reaches the counter.

Question 4

A person comes to the pharmacy counter and sees a prescription bag for their neighbor, Jane Doe, on the will-call shelf. They ask you, "Oh, is that for Jane? I can just take that to her." How should you respond?

Accepted Answer

"For her privacy and safety, I cannot confirm who that prescription belongs to or release it without verifying pickup authorization and patient identifiers, like her date of birth."

Answer

"Sure, as long as you're going right there, it will save her a trip."

Answer

"Okay, but can you please sign here stating you picked it up for her?"

Answer

"I can't give it to you, but I can call Jane and let her know you're here."

Question 5

While counseling a patient at the counter, a pharmacist speaks loudly, and another customer waiting several feet away overhears the patient's name and the medication being discussed. Under HIPAA, what is this situation most likely considered?

Accepted Answer

An incidental disclosure, which is permissible if reasonable safeguards were in place.

Answer

A direct violation that must be reported to the federal government immediately.

Answer

A permitted disclosure for treatment purposes.

Answer

A breach of confidentiality requiring the patient's written notification.

Question 6

A law enforcement officer presents their badge and asks for a patient's address and medication history, stating it is for an official investigation. According to HIPAA and standard pharmacy procedure, what is the correct action?

Accepted Answer

Ask the officer to wait and immediately refer them to the Pharmacist-in-Charge, as a warrant, subpoena, or other legal order is typically required.

Answer

Provide the information immediately to cooperate with the investigation.

Answer

Politely refuse and state that no patient information can ever be shared with law enforcement.

Answer

Give the officer the patient's address but withhold the medication history to minimize the disclosure.

A patient's adult child calls the pharmacy asking if their mother's blood pressure medication has been refilled, explaining they are on their way to pick it up.Which of the following is the most appropriate response to comply with HIPAA?

A patient's adult child calls the pharmacy asking if their mother's blood pressure medication has been refilled, explaining they are on their way to pick it up.
Which of the following is the most appropriate response to comply with HIPAA?