EHR Health Information Privacy & Security 4

Question 1

A patient requests an amendment to their health record. The covered entity may deny the request if:

Accepted Answer

The record was not created by the covered entity

Answer

A covered entity may deny an amendment request if the record was not created by that entity, among other valid grounds.

Question 2

Which type of malware encrypts an organization's files and demands payment for the decryption key?

Accepted Answer

Ransomware

Answer

Ransomware encrypts the victim's data and demands a ransom payment in exchange for the decryption key.

Question 3

Under the HITECH Act, which entities were directly subject to HIPAA Security Rule requirements for the first time?

Accepted Answer

Business associates of covered entities

Answer

HITECH extended direct HIPAA Security Rule liability to business associates, who were previously only bound contractually through BAAs.

Question 4

A nurse shares a patient's HIV status with the patient's employer without authorization. Under HIPAA, this is:

Accepted Answer

An impermissible disclosure of PHI

Answer

Disclosing a patient's PHI to their employer without authorization is an impermissible disclosure under HIPAA.

Question 5

Which of the following is a physical safeguard required by the HIPAA Security Rule?

Accepted Answer

Facility access controls limiting physical access to ePHI systems

Answer

Facility access controls — such as locks, badges, and surveillance — are physical safeguards required to limit physical access to systems containing ePHI.

(EHR) Electronic Health Records Program Certification Practice Test

(EHR) Electronic Health Records Program Certification Practice Test

EHR Health Information Privacy & Security 4