CVS Patient Confidentiality and HIPAA 3

Question 1

A law enforcement officer requests a patient's prescription fill history without a court order. Under HIPAA, a pharmacy may:

Accepted Answer

Disclose limited information in specific circumstances such as identifying a suspect or responding to a valid legal process

Answer

HIPAA permits certain disclosures to law enforcement under defined conditions, such as court orders, subpoenas, or specific crime-related situations.

Question 2

Which of the following is NOT an element of protected health information (PHI)?

Accepted Answer

A de-identified aggregate statistic about flu vaccine uptake with no individual identifiers

Answer

Information that has been properly de-identified and contains no individual identifiers is not considered PHI under HIPAA.

Question 3

How long must covered entities retain HIPAA-related policies and documentation?

Accepted Answer

6 years from creation or last effective date

Answer

HIPAA requires covered entities to retain documentation of policies and procedures for six years from creation or when it was last in effect.

Question 4

A pharmacy's electronic health records system is hacked and patient data is exposed. What is the pharmacy's obligation under the HIPAA Breach Notification Rule?

Accepted Answer

Notify affected individuals, HHS, and potentially media if the breach affects 500 or more individuals in a state

Answer

The Breach Notification Rule requires notifying affected individuals, HHS, and local media (for large breaches) within specific timeframes.

Question 5

Which federal agency is responsible for enforcing HIPAA Privacy and Security Rules?

Accepted Answer

The Office for Civil Rights (OCR) within HHS

Answer

The HHS Office for Civil Rights (OCR) is the primary enforcer of HIPAA Privacy and Security Rules.

CVS - Assessment Practice Test

CVS - Assessment Practice Test

CVS Patient Confidentiality and HIPAA 3