Patient Confidentiality and HIPAA Flashcards
7 cards from real CVS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Patient Confidentiality and HIPAA flashcards as text
A patient calls the pharmacy and asks a technician to fax their prescription records to their new employer. What should the technician do?
Answer: Verify the patient's identity, obtain a signed authorization, then release only what is needed
A signed HIPAA authorization from the patient is required before releasing PHI to a third party such as an employer.
Which of the following is considered a HIPAA-covered entity?
Answer: A health insurance plan that pays prescription claims
Health plans, healthcare clearinghouses, and healthcare providers that transmit PHI electronically are covered entities under HIPAA.
Under HIPAA, what is the minimum necessary standard?
Answer: PHI should be disclosed only to the extent needed to accomplish the intended purpose
The minimum necessary standard requires that only the PHI needed to fulfill a specific purpose is accessed or disclosed.
A CVS patient presents a prescription and mentions she does not want her husband, who is also a CVS customer, to know what medication she is picking up. What is the correct action?
Answer: Honor the patient's request and keep her prescription information private
Patients have the right to request confidential communications and restrict who receives their PHI.
Which action best demonstrates proper disposal of PHI at a pharmacy?
Answer: Cross-shredding documents containing patient information before discarding
PHI must be rendered unreadable before disposal; cross-shredding printed materials is an approved method.
A pharmacy technician overhears a colleague discussing a celebrity patient's medication in the break room. What should the technician do?
Answer: Remind the colleague that discussing PHI in non-private areas is a HIPAA violation
HIPAA prohibits incidental disclosures of PHI in public or semi-public spaces; the technician should address the violation.
What must a pharmacy provide to new patients under HIPAA?
Answer: A Notice of Privacy Practices explaining how PHI is used and protected
Covered entities must provide patients with a Notice of Privacy Practices (NPP) at the first point of service.