CVS Patient Confidentiality and HIPAA 2

Question 1

A patient calls the pharmacy and asks a technician to fax their prescription records to their new employer. What should the technician do?

Accepted Answer

Verify the patient's identity, obtain a signed authorization, then release only what is needed

Answer

A signed HIPAA authorization from the patient is required before releasing PHI to a third party such as an employer.

Question 2

Which of the following is considered a HIPAA-covered entity?

Accepted Answer

A health insurance plan that pays prescription claims

Answer

Health plans, healthcare clearinghouses, and healthcare providers that transmit PHI electronically are covered entities under HIPAA.

Question 3

Under HIPAA, what is the minimum necessary standard?

Accepted Answer

PHI should be disclosed only to the extent needed to accomplish the intended purpose

Answer

The minimum necessary standard requires that only the PHI needed to fulfill a specific purpose is accessed or disclosed.

Question 4

A CVS patient presents a prescription and mentions she does not want her husband, who is also a CVS customer, to know what medication she is picking up. What is the correct action?

Accepted Answer

Honor the patient's request and keep her prescription information private

Answer

Patients have the right to request confidential communications and restrict who receives their PHI.

Question 5

Which action best demonstrates proper disposal of PHI at a pharmacy?

Accepted Answer

Cross-shredding documents containing patient information before discarding

Answer

PHI must be rendered unreadable before disposal; cross-shredding printed materials is an approved method.

CVS - Assessment Practice Test

CVS - Assessment Practice Test

CVS Patient Confidentiality and HIPAA 2